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IT  is  a  new  generation  of  management  software  that’s  unlike 
anything  you’ve  ever  seen  before. 

IT  is  a  family  of  best-of-breed  solutions  that  can  tackle  all  of 
your  network  and  systems  management  challenges. 

IT's  smart.  IT’s  new.  IT's  different. 

Call  for  information  and  you’ll  be  glad  you  did. 

Because  this  really  is,  as  good  as  IT  gets. 

Call  1-888-864-2368  or  visit  www.cai.com 
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INTRANET  INTROSPECTIVE  Two 
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Smith  from  Yahoo!  claims,  “Oracle8  on 
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was  over.  Find  out  how  Oracle8  can  put 
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more,  or  call  800-633-1072,  ext.  12821 
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data  warehouse,  easily  search  through 
inventory  data,  and  put  together  adver¬ 
tising  packages  for  their  customers.  What’s 
more,  the  scalability  of  Oracle8  on  NT 
allows  Yahoo!  to  grow  their  business 
dynamically,  enabling  success  through 
rapid  access  to  business  information. 
There’s  more  to  shout  about.  Doug 
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Expert  support. 
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build  the  most  stable  of  networks. 
Who  are  able  to  put  together  any  kind 
of  hardware  or  software  we  ask  for. 
Who,  as  a  matter  of  course,  provide 
experienced  support  people  at  any 
hour,  day  or  night,  and  easy  access  to 
their  top  system  engineers. 

We  don;t  need  vendors 
who  try  to  push 
through  off-the-shelf 
solutions  -  what  we  want, 
and  what  we  need,  are  vendors 
who  can  do  things  our  way. 

Isn't  it  great  when  you  can  meet  your 
wants  and  needs  at  the  same  time ? 
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In  Box 

LETTER  FROM  THE  EDITOR,  READER  FEEDBACK 
AND  HOW  TO  REACH  US 

ThC  WOrd.  implies  a  transaction.  I’ve  never 

referred  to  my  technical  partners  as  vendors.  That  would  suggest  a  mind-set  that 
this  relationship  is  just  a  transaction,  and  that’s  not  how  I  want  them  approaching 
the  job.” 

-Raymond  B.  Greer 

Senior  Vice  President  and  General  Manager  of  Global  Operations 

Ryder  Integrated  Logistics  Inc. 

When  we  began  brainstorming  ideas  for  this 
special  report  on  vendor  relationships,  it  wasn’t 
long  before  we  were  throwing  around  cover  lines 
from  women’s  magazines:  C/O’ s  Vendor 
Compatibility  Quiz;  How  to  Tell  Him  What  You 
Really  Want.  It  began  as  a  joke,  but  as  an  over¬ 
all  concept  the  idea  wouldn’t  go  away,  as  you  can 
see  from  the  cover,  design  and  headlines. 

Before  you  dismiss  this  as  frivolity,  think 
about  it  for  a  minute.  We  concluded  that  the 
important  topics  were  selecting  partners,  man¬ 
aging  the  relationships  and  getting  out  intact 
when  things  sour.  The  parallels  with  women’s 
magazines  were  obvious. 

But  it  goes  deeper.  The  IS  executives,  vendors  and  other  experts  we  talked  to  for 
this  issue  made  it  clear  that  such  partnerships  take  respect,  commitment,  commu¬ 
nication  and  give  and  take.  Increasing  numbers  of  customer/vendor  relationships 
are  moving  from  the  realm  of  transaction,  as  Ryder’s  Greer  describes  it  above,  to 
more  closely  resemble  a  real  partnership  situation,  with  both  parties  committed  to 
a  common  goal. 

Time  and  again,  the  people  we  interviewed  said,  “You’ve  got  to  treat  vendors  the 
way  you  want  to  be  treated.”  While  a  good  contract  is  critical,  once  it’s  written  it’s 
best  to  put  it  aside.  The  relationship  management  group  at  United  HealthCare  Corp. 
in  Minneapolis  has  an  inside  joke  that  “the  first  person  who  reads  the  contract  gets 
fired,”  says  Tom  Dougherty,  senior  vice  president  of  strategic  IS  relationships  (see 
“For  Better  or  Worse,”  by  Senior  Writer  Tom  Field,  Page  44). 

Unfortunately  for  many  organizations  (like  many  marriages),  building  and  main¬ 
taining  these  kinds  of  relationships  involves  engaging  in  activities  that  may  not  come 
naturally.  CIOs  and  their  lieutenants  must  be  able  to  talk  about  issues  as  they  come 
up  and  push  for  clarity  and  resolution. 

If  you  have  a  team  dedicated  to  vendor  management,  make  certain  that  its  mem¬ 
bers  have  great  communication  skills.  And  if  this  is  a  responsibility  you  and  your 
staff  share,  get  some  training  in  the  “softer”  skills  now.  You’ll  see  a  payoff.  Because 
managing  vendor  relationships  well  is  the  best-kept  secret  to  a  long-lasting  union. 


Abbie  Lundberg 
lundberg@cio.  com 
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PERSONAL  ASSISTANCE 
I  liked  the  discussion  about  the  Y2K 
problem  by  Edward  Yardeni,  Garth 
Saloner  and  Stephen  Roach  [“Economic 
Dissension,”  CIO  Section  2,  May  15, 
1998].  However,  I  have  one  question  for 
the  three  of  them:  What  should  individ¬ 
uals  do  to  prepare  for  Jan.  1,  2000? 

Anthony  M.  Kelly 
Technology  Associate 
Forecasting  and  Assessment 
Eastman  Kodak  Co. 

Rochester,  N.Y. 
tkelly@kodak.com 

TITLE  SEARCH 

The  letter  to  the  editor  from  David  Block 
in  CIO  Section  1,  May  15,  1998, 
prompted  me  to  think  about  the  nagging 
question  of  what  an  information  officer 
or  CIO  is.  I  can  easily  understand  and 
explain  the  titles  “chief  executive 
officer”  and  “chief  financial  officer.” 
However,  when  the  phrase  “chief  infor¬ 
mation  officer”  is  mentioned,  I  wince 
and  feel  perplexed. 


How  to  Reach  Us 


E-mail:  letters@cio.com 
Phone:  508  872-0080 
Fax:  508  879-7784 

Address:  CIO  Communications  Inc., 

492  Old  Connecticut  Path,  P.O.  Box  9208, 
Framingham,  MA  01 701-9208 

Web  Site:  www.cio.com 

Subscriber  Services:  800  788-4605; 

Fax:  508  879-7899; 

E-mail:  denisep@cio.com 

Reprints:  Reprints  are  available  by 
calling  508  935-4539. 

Letters  may  be  edited  for  length  or  clarity. 


Perhaps  the  word  information  is  the 
root  of  the  problem.  Let’s  assume  a  finan¬ 
cial  officer  is  concerned  with  the  man¬ 
agement  and  control  of  money  and  mon¬ 
etary  assets.  By  analogy,  an  information 
officer  is  concerned  with  the  manage¬ 
ment  and  control  of  information  and 
informational  assets.  I  know  what 
money  is,  but  what  is  information? 
Does  it  differ  from  or  does  it  include 
news,  knowledge,  intelligence,  intellec¬ 
tual  property,  instructions,  directions 
and  advice? 

Numerous  people  manage  and  con¬ 
trol  information:  editors,  publishers, 
librarians,  journalists,  physicians,  attor¬ 
neys,  consultants  and  mutual  fund  man¬ 
agers,  for  example.  Although  the  people 
who  hold  these  positions  don’t  say  they 
are  information  officers,  they  do  man¬ 
age  and  control  information.  Could  or 
should  people  in  these  roles  serve  as  an 
organization’s  CIO?  Until  the  word 
information  is  clearly  defined,  there  will 
be  no  simple  answer  to  this  question  that 
will  please  everyone. 

Jim  Schwartz 

Information  Analyst 
ElectroniCast  Corp. 

San  Mateo,  Calif. 

MORE  DEMAND  THAN  SUPPLY 
The  idea  that  there  is  no  shortage  of  IT 
professionals,  which  Norman  Matloff 
suggests,  is  absurd  [In  Box,  CIO  Section 
1,  June  1,  1998].  As  a  CIO  responsible 
for  overall  conduct  of  IS,  recruiting  is  an 
area  in  which  I  am  increasingly  person¬ 
ally  involved.  The  notion  that  a  public 
relations  campaign  could  create  what  I 
deal  with  daily  does  not  recognize  that 
we  have  an  increased  number  of  more 
and  more  complex  projects  (such  as  ERP, 
Y2K  and  supply  chain  management). 

This  growing  demand  for  new  tech¬ 
nology  and  replacement  of  old  coupled 
with  an  increasing  number  of  older  IT 
folks  who  are  retiring  has  created  a 
shortfall  of  staff  regardless  of  age  or 
national  origin.  We  all  understand  that 
younger  people  are  usually  more  open- 
minded  and  require  less  compensation; 
however,  my  overarching  need  is  for 
competent  people  who  want  to  do  a 
great  job,  and  age  is  not  a  factor. 

Wollaston  B.  Morin 
New  York  City 
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cio.com 

http://www.cio.com 

CIO  RADIO 

A  new  Web  site  feature!  Listen  to 
influential  executives  discuss  today’s 
hottest  IT  topics. 
www.  do.  com/ ’radio 


GLOBALIZATION 
RESEARCH  CENTER 

It’s  a  small  world.  Learn  how  to  do 
business  anywhere  in  the  world. 
www.  do.  com/forums/global 


REMOTE  COMPUTING 
RESEARCH  CENTER 

Whether  you  take  it  on  the  road  or 
work  from  home,  you’ll  find  new 
strategies  to  make  telecommuting 
easier. 

www.  do.  com! forums /remote 


ONLINE  QUICK  POLL 

Visit  the  CIO  Online  Quick  Poll, 
which  presents  a  new  question  every 
week.  Post  your  opinion  and  see 
what  your  fellow  CIOs  have  to  say 
about  today’s  hot  topics. 
www.cio.com/poll 


KNOWLEDGE 
MANAGEMENT 
RESEARCH  CENTER 

Learn  best  practices  for  the  capture, 
analysis,  dissemination  and  archiv¬ 
ing  of  information  into  knowledge. 
www.  do.  com/ for  urns /knowledge 
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Unisys-deployed  Microsoft®  Windows  NT  systems  are  virtually  fail-safe.  So  they're  the  perfect  solution  for  mission-critical 
operations  such  as  a  91 1  dispatch  system.  Unisys  eNTerprise-class  servers  feature  redundant  hardware,  intelligent  error  handling, 
and  a  choice  of  clustering  solutions.  And  our  expertise  in  creating  and  supplying  eNTerprise-class  NT  solutions  remains 
exceptional.  That's  why  Microsoft  has  teamed  up  with  Unisys  to  create  the  Unisys/Microsoft  Enterprise  Partnership— an  alliance 
designed  to  help  customers  capitalize  on  NT  as  an  anchor  for  highly  robust  solutions.  Stop  by  our  Web  site  to  find  out  more. 

UNISYS 


Unisys  eNTerprise-class  solutions  for  Windows  NT 

are  built  to  withstand  anything. 

Go  ahead,  just  try  and  knock  them  down. 
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www.unisys.com/ent 


Publishers  Note 


Which  statement  best  reflects 

your  view  of  network  security? 

“We  have  a  firewall.  We’re  OK.” 

“My  system  is  100  percent  secure.” 

“Total  security  is  too  expensive.” 

“Hackers  are  just  kids  playing  around.” 

“I  don’t  have  time  for  that  security  stuff.” 

I  am  sitting  at  the  1998  PC  Forum  in 
Tucson,  Ariz.,  an  annual  conference  focused 
on  future  technology  trends,  and  presenters 
from  IBM  Corp.’s  Global  Security  Analysis 
Laboratory  have  just  offered  the  above 
statements  as  the  top  five  excuses  CIOs  give 
when  opting  not  to  make  their  networks 
more  secure.  Is  your  reason  on  the  list? 

In  dealing  with  security,  CIOs  constantly  face  this  paradox:  how  to  make 
the  network  more  secure  while  externally  extending  access  to  more  customers, 
partners  and  suppliers.  It  is  a  tough  order.  It  helps  to  know  the  enemy. 

Security  breaches  emanate  from  three  sources:  kids,  disgruntled  employees  or 
customers  and  professionals.  Each  class  is  tenacious  and  creative.  Kids  hack 
because  they  think  it’s  cool  and  to  gain  personal  recognition  and  prestige. 

Unhappy  employees  and  customers  do  it  for  revenge.  Professionals  are  motivated 
by  money. 

Fun,  revenge  and  greed  are  three  powerful  forces  working  against  your 
network  security  efforts. 

Why  are  networks  so  easily  penetrated?  According  to  IBM,  the  top  five  reasons 
are  as  follows:  insecure  Web  servers,  weak  personal  passwords,  disabled  access 
controls,  uninstalled  security  software  upgrades  and  no  coherent  systems  manage¬ 
ment.  (For  more  on  network  security,  see  “A  Game  of  Cat  and  Mouse,”  Page  62.) 

Focusing  your  efforts  in  these  areas  will  make  your  network  more  secure.  And 
here’s  one  more  thing  to  do.  Pay  close  attention  to  your  company’s  employee  and 
customer  satisfaction  ratings.  Kid  hackers  will  be  kids  and  professionals  will  be 
professionals.  There’s  not  much  you  can  do  there.  But  if  you  and  your  manage¬ 
ment  team  work  hard  to  keep  your  company’s  employee  and  customer  satisfaction 
ratings  high,  you  will  minimize  security  breaches  from  what  I  consider  to  be  the 
most  potent — and  preventable — source:  employees  and  customers. 

What  do  you  think?  Should  we  leave  the  kids  and  professionals  alone  and  focus 
most  of  our  efforts  on  employees  and  customers?  Send  me  your  thoughts. 


Gary  J.  Beach 
gary_beach@cio.com 
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VOICE  HAIL 
in  the  YEAR  2000? 


SOLUTIONS  EROM  LOGENT  TECHNOLOGIES  On  January  1  2000,  you  may  f ind 

your  voice  mail  system  isn't  functioning  as  usual.  In  fact,  all  your  business  communications 
(call  centers,  call  accounting,  etc.)  may  be  affected. 

Fortunately,  Lucent  is  here  to  help  you  get  ready 
for  the  Year  2000  (we'll  even  give  your  business 
a  free  consultation).  Just  call  your  Lucent  BCS  Account 
Representative  or  1-800-221-1223  extension  400. 

For  more  information,  visit  our  web  site  at: 
http://www.lucent.com/enterprise/sig/yr2000. 

We  make  the  things  that  make  communications  work!” 


Lucent  Technologies 

.  Bell  Labs  Innovations 
Business  Communications  Systems 


©  1998  Lucent  Technologies 


strategic  partnerships.  And  the  passion  for  useful  innovation  that  drives  us  to  seek  the  best?  s 

Better  answers: 


or  run  a  vast  global  enterprise  network.  How?  With  affordable,  industry-standard  products  and  services.  The  deepest 
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solutions  to  your  toughest  problems.  For  more  answers,  better  answers,  visit  www.compaq.com/me  or  call  1-800-AT-COMPAQ. 


jfc  'ST!  paiajsSej  bsdiuoj  | 


NEWS.  INSIGHT.  HUMOR,  REV  1 1W  S 

Edited  by  Katherine  Noyes 


The  Personal  Touch 


Even  Closer  Encounters 


VENDOR  MANAGEMENT 


Tomima  Edmark  might  be  both  a 
vendor’s  best  dream  and  worst  nightmare. 

On  one  hand,  Edmark  outsources  virtually  every  business 
function  of  her  Dallas-based  company,  The  TopsyTail  Co.,  a 
multimillion-dollar  consumer  products  company  that  makes 
hair  accessories,  jewelry  and  dolls.  Manufacturing,  customer 
service  and  public  relations  are  all  vendor-operated. 

But  here’s  the  other 
hand:  Edmark  tries  to 
hire  only  Dallas-based 
vendors,  and  she 
avoids  signing  con¬ 
tracts  with  them.  In¬ 
stead,  she  handles 
vendor  relationship 
management  quite 
personally.  “I’m  a 
phone-aholic,”  says 
the  former  IBM 
Corp.  salesperson- 
cum-entrepreneur. 
“I’m  on  the  phone 
constantly  with 
[vendors]  making 
sure  things  get 
done.  There  is  a  lot 
of  follow-up.” 

Edmark,  the  company’s  president,  wasn’t  always  that 
way.  When  she  founded  TopsyTail  in  1989,  she  initially  had  for¬ 
mal  contract  relationships  with  vendors.  But  she  got  burned  by 
a  bad  deal  with  an  injection  molder  several  years  ago — killing 
the  deal  fed  a  lot  of  lawyers  for  a  long  time — and  since  then,  Ed¬ 
mark  has  soured  on  legal  agreements.  “My  legal  fees  are  my 
biggest  line  item,  and  I  resent  that,”  Edmark  says.  “Besides,  if 
I’ve  got  an  ongoing  relationship  with  a  vendor  and  I  have  to  go 
to  a  contract,  then  the  relationship  is  in  trouble.” 

One  function  Edmark  does  keep  in-house:  IS.  Financial  data 
and  client  information  all  are  processed  internally  on  a  small 
network  of  PCs.  “That’s  the  heart  and  soul  of  a  company;  I 
don’t  think  it  should  be  outsourced,”  Edmark  says  of  her  data 
center.  She  does,  however,  outsource  PC  maintenance  to 
William  Grunnah,  a  local,  independent  contractor  known  in  the 
office  as  “Bill  the  Computer  Guy.”  “If  he  can’t  answer  questions 
by  phone,  he  comes  over,”  Edmark  says.  “He  charges  only  $80 
an  hour — it’s  cheap.” 

For  more  on  vendor  management,  see  “For  Better  or  Worse,” 
Page  44.  -Tom  Field 


SEARCH  FOR  E.T. 


Calling  all  computer  users: 
Want  to  be  part  of  the  search  for  life  in  outer  space? 
You  and  your  Internet-connected  PC  can,  thanks  to 
a  remarkable  Search  for  Extra-Terrestrial  Intelli¬ 
gence  (SETI)  project  being  spearheaded  by  a  group 
of  current  and  former  academics  at  the  University  of 
California  at  Berkeley. 

The  signals  picked  up  by  astronomers'  radio  tele¬ 
scopes  provide  scientists  with  a  wealth  of  informa¬ 
tion  about  the  evolution  of  the  universe.  Among  the 
blizzard  of  radio  signals  they  detect  may  be  signs  of 
life — either  deliberate  attempts  at  communication  or 
patterns  of  pulses  inadvertently  leaked  into  space. 
But  detecting  these  patterns  amid  the  static  of  natu¬ 
rally  occurring  sources  of  radio  energy  calls  for  mas¬ 
sive  computer  power.  Currently,  the  most  powerful 
computer  in  the  world  is  at  the  Sandia  National 
Laboratory  in  Albuquerque,  N.M.  It  contains  9,21 6 
Pentium  processors  and  belongs  to  the  U.S.  govern¬ 
ment — whose  plansfor  it  do  not  include  looking  for 
little  men  in  outer  space,  green  or  otherwise. 

Enter  the  Internet,  with  its  millions  of  connected 
Pentium  processors.  Internet-linked  computers 
have  successfully  tackled  particularly  hairy  prob¬ 
lems  in  the  past — two  of  the  largest  prime  numbers 
known  were  found  by  thousands  of  Internet-linked 
computers  working  on  parcels  of  the  problem  in 
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Making  it  Easy  to 
Deliver  the  Right 
Data...to  the  Right 
Decision  Makers 


Datamation 


Readership 

Award 

1997 


Category:  Data  Warehousing 


So  much  business  data.  Scattered  in  so  many 
places  throughout  your  company  Is  it  any  wonder 
you  find  it  difficult  to  provide  access  to  consistent, 
reliable,  and  timely  information  to  fuel  effective 
decisions?  The  SAS  Data  Warehousing  Solution — 
from  the  world’s  leading  decision  support 
provider — helps  you  meet  the  challenge. 


Data  Integrity  and  Quality 

Seamless  Integration 
and  Process  Automation 


What’s  more,  well  guide  you  every  step  of  the 
way — from  getting  started  to  managing  your 
data  warehouse.  One  solution  brings  you  the 
approach,  technology,  and  resources  you  need. 
Well  provide  the  entire  solution,  or  integrate  easily 
with  your  existing  technologies. 


Maximum  Return 
on  Investment 

Strategic  Partnerships 


The  SAS  Data  Warehousing  Solution  lets  you 
provide  a  single  version  of  the  tmth  to  your  entire 
business  community.. as  you  make  optimal  use  of 
your  existing  hardware,  software,  and  data. 

The  Data  Warehousing  Product  of  the  Year 


Step-by-Step 

Implementation 

Web  Enabled 


See  for  yourself  why  200,000  IT  managers  named 
the  SAS  solution  their  Data  Warehousing  Product 
of  the  Year... for  two  years  running.  Visit  us  at 
www.sas.com/dw  for  more  information  and  to 
request  a  free  SAS  Data  Warehousing  mouse  pad. 


Year  2000  Compliant 


SAS  Institute  Inc. 


The  Business  of  Better  Decision  Making 


E-mail:  cio@sas.com  www.sas.com/dw  919.677.8200 


In  Canada  phone  1 .800.363.8397  SAS  is  a  registered  trademark  of  SAS  Institute  Inc.  Copyright  ©  1998  by  SAS  Institute  Inc. 


Trendlines 


parallel,  for  example,  and  the  well-publi¬ 
cized  breaking  of  a  56-bit  encryption  key 
in  October  1 997  was  possible  thanks  to 
some  4,000  active  teams  of  volunteers, 
whose  computers  were  collectively  pro¬ 
cessing  7  billion  keys  per  second. 

David  Anderson  and  Dan  Werthimer 
are  project  director  and  chief  scientist, 
respectively,  for  the  SETI@home  project. 
Funds  permitting — all  donations  are 
welcome,  stresses  Anderson — the  team 
hopes  that  by  the  end  of  the  year  it  will 
be  parceling  up  one-minute  chunks  of 
radio  signal  data  from  the  world's  largest 
and  most  sensitive  radio  telescope,  at 
Arecibo  in  Puerto  Rico,  and  distributing 
them  to  volunteers'  computers  around 
the  world  for  analysis. 


The  clever  part  is  how  the  analysis  will 
be  done.  The  SETI@home  project  team 
intends  to  use  the  spare  time  on  volun¬ 
teers'  computers  that  is  otherwise  devot¬ 
ed  to  running  screen-saver  programs.  So, 
instead  of  emulating  an  aquarium  ora 
flock  of  flying  toasters  when  they  be¬ 
come  idle,  the  computers  will  use  special 
software — provided  to  volunteers — to 
sift  the  Arecibo  data  for  signs  of  alien  life 
forms.  The  result  from  each  search  will  be 
a  reduced  set  of  data  points  that  need  to 
be  examined  further  by  more  sophisti¬ 
cated  software.  To  date,  more  than 
1 00,000  people  have  expressed  an  inter¬ 
est  in  helping  out. 

For  Anderson,  the  project  represents  a 
fortuitous  combination  of  three  of  his 


passions:  astronomy,  SETI  and  distribut¬ 
ed  computing.  Whilethefunding  issue 
was  still  unresolved  at  press  time,  he  and 
the  team  are  very  hopeful  that  the  dol¬ 
lars  will  be  in  place  soon.  How  confident 
is  Anderson  that  the  project  will  find  any 
aliens?  "I'm  not  very  optimistic,  but  I  feel 
it's  something  we  have  to  do — just  on 
the  small  chance  that  they  are  actually 
out  there,"  he  says.  Of  course,  even  if  he 
does  find  extraterrestrial  beings,  he 
warns,  "we  couldn't  have  a  conversation 
with  them;  a  reply  might  take  1 0,000 
years  to  get  there." 

To  learn  more  about  the  project  or  to 
volunteer  your  computer,  visit  setiathome. 
ssl.berkeley.edu. 

-Malcolm  Wheatley 


David  Copperfield,  Eat  Your  Heart  Out 


looking  for  projects  to 
explore  potential  appli¬ 
cations  of  digital  media. 
Jantzen’s  blueprints  for 
the  Malibu  Video  House 
include  the  entire  interior 
as  well  as  the  exterior, 
and  they  lay  out  plans  for 
an  intriguing  combination 
of  virtual  and  actual 
interactive  environments. 
For  example,  foldaway, 
ultrathin  monitors 
abound;  it’s  a  place  where 
a  virtual  gull  might  alight 
on  a  real  sofa. 

“There’s  a  lot  already 
being  done  with  the 
virtual  world,  where 
everything  is  in  a 
computer,”  says  Jantzen. 
“I’m  interested  in 
blending  the  physical 
world  with  the  virtual  and 
creating  something 
altogether  new.” 


No  plans  to  build  the 
actual  virtual  beach 
house — too  exorbitant, 
says  Jantzen — but  beware: 
The  concept  folks  at  The 
Walt  Disney  Co.’s  Imagi- 
neering  studio  have 


expressed  an  interest. 
Maybe  someday  we’ll  be 
buying  combined  passes 
for  the  Magic  and  Com¬ 
puter  Kingdoms,  and 
traveling  to  Orlando  to 
take  in  a  Seattle  sunset.  ■ 


—Ml 


INVISIBLE  HOUSE 


noyed  by  houses  obscuring 
the  ocean  view  along  the 
Pacific  Coast  Highway  in 
southern  California,  an 
artist  from  El  Segundo 
has  created  a  way  to  make 
the  pesky  structures  disap¬ 
pear.  Only  he  doesn’t 
diddle  with  magic.  He 
toils  with  IT. 

It’s  only  in  the  design 
phase,  but  if  built, 

Michael  Jantzen’s  “invis¬ 
ible  house”  would  have  a 
front  exterior  made  up  of 
flat-panel  gas-plasma 
monitors  displaying  real¬ 
time  or  recorded  videos  of 
the  surrounding  environ¬ 
ment.  Jantzen  designed 
the  house  as  part  of  a 
grant  from  the  Art  Center 
College  of  Design  in 
Pasadena,  where  he’s  an 
instructor.  The  school  was 
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N  S  T  A  N  T 


EXTRANET 


JUST  ADD 

INTELISPAN 


Create  A  Secure,  Collaborative 
Community  In  Minutes,  Not  M  o  nth  s 


Today  you  have  to  make  data  sharing  with  trad 


ING  PARTNERS  AS  SIMPLE  AS  POSSIBLE.  And  YOu'vE  GOT 


TIL  YESTERDAY  TO  MAKE  IT  WORK 


At  Intelispan, 

WE  ALONE  CAN  WORK  WITH  THIS  TIMELINE.  We  PROVIDE 
EVERYTHING  YOU  NEED  TO  CREATE  COLLABORATIVE 
TRADING  COMMUNITIES  LITERALLY  AS  FAST  AS  YOU  SEND 
E-MAIL;  AT  NO  UPFRONT  COST  TO  YOUR  PARTNERS. 

Using  our  Virtual  Private  Network,  we  offer  an 

ENTERPRISE- STRENGTH  SOLUTION  FOR  SHARING  MIS¬ 
SION-CRITICAL  DATA.  It's  THE  ANSWER  FOR  RELATION¬ 
SHIP  MANAGEMENT  CHALLENGES.  It's  ALSO  A  COM¬ 
PLETELY  INTEGRATED  SOLUTION  FOR  THE  INTEROPERA¬ 
BLE  EXCHANGE  OF  EDI  AND  NON -EDI  DATA  IN  A  COL~ 
LABORATIVE  COMMUNITY  OF  TRADING  PARTNERS, 
REGARDLESS  OF  PLATFORM.  3^  BETTER  YET,  OUR  INSTANT 
EXTRANET  SOLUTION  IS  PART  OF  OUR  ExSPANd  VPN, 


WHICH  USES  A  SECURE  IP  NETWORK  THAt’s  COMPLETELY 
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SEPARATE  FROM  THE  INTERNET.  OuR  STANDARDS -BASED 
NETWORK  CAN  ACCOMMODATE  NON-PUBLIC  IP  SPACE  — 
THAT  MEANS  NO  ONE  CAN  SEE  YOUR  IP  ADDRESSES,  AND 
NO  ONE  BUT  YOU  AND  YOUR  PARTNERS  WILL  EVEN  KNOW 
YOU'RE  THERE.  PLUS,  OUR  INTELLIGENT  NETWORK 
ENSURES  THAT  NO  ONE  CAN  SURF  —  USERS  CAN  ONLY  GO 

?  >  M  %  pi  ‘  t  |  g 

WHERE  YOU  WANT  THEM,  WHEN  YOU  WANT  THEM  TO. 

All  YOU  DO  IS  SET  up  the  service,  and  you're  off 
AND  RUNNING.  AnD,  LIKE  OUR  ExSPANd  NETWORK, 
THERE  IS  NO  CAPITAL  INVESTMENT.  You  PAY  ONLY  FOR 
WHAT  YOU  USE  ON  A  METERED  BASIS. 


THE  FREEDOM  TO  SUCCEED. 

INTELISPAN 

SECURE  IP  NETWORK 
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ABOUT  YOUR  APPLICATIONS  ISN'T 


of  their  respective  holders. 


Knowing  exactly  what  your  applications  are 
doing  is  often  half  the  battle  of  managing  them. 
With  ETEWatch  from  Candle,  you  can  not  only 
monitor  application  activity,  but  you  can  track  actual 
application  response  time  for  each  client  on  the 
network.  This  way,  you  know  exactly  what  your 
applications  are  up  to.  You  know  exactly  what  your 
users  are  up  to.  You  are,  quite  simply,  in  control. 

For  more  information  or  a  free  CD  featuring  demos 
of  ETEWatch  and  other  Candle  application  solutions, 
visit  www, candle. com/ads/zap  or  call  1  -800-372-2218. 
We'll  help  get  the  information  you  need,  whatever 
it  takes. 

iCandle 

See  what  your  applications  can  do. 


Trendlines 


Word  for  Word 


READING  TOOL 


_  What  do  the  CIA,  Britain’s 

Royal  Bank  of  Scotland  and  thousands  of  legally 
blind  people  have  in  common?  Answer:  They  all 
use  an  orthotic  reading  tool  on  their 
computers.  It  may  sound  esoteric, 
but  such  a  tool  could  very  well  be 
of  great  use  to  you. 

Olympia,  Wash. -based  Tenax 
Software  Engineering  claims  that 
its  product  Vortex  enables  the 
average  American  computer 
user — whose  reading  speed  is 
about  240  words  a  minute — to 
double  his  or  her  reading  speed 
at  the  first  use  of  the  product. 
How?  Words  are  displayed  one  at  a 


time  on  a  computer  screen,  in  letters  as  big  as 
1,000  points,  or  roughly  13  inches  tall.  Speed  is 
controlled  by  the  reader,  and  reading  speeds  of 
2,000  words  a  minute  are  attainable. 

“Humans  read  better  if  the  words  are  presented 
sequentially,  as  they  are  in  conversation,”  says  the 
company’s  founder  and  CEO,  Cliff  High.  Skipping 
back  and  forth  along  the  page  or  screen  not  only 
slows  the  reader  but  causes  eye  strain  and  fatigue. 
Presenting  the  words  individually  minimizes  those 
problems  and  aids  comprehension  as  well.  The  av¬ 
erage  reader  actually  sees  only  64  in  every  100 
words,  inferring  the  rest  from  their  context,  ex¬ 
plains  High.  “So  comprehension  starts  at  64  per¬ 
cent  and  degrades  from  there.  With  Vortex,  read¬ 
ing  comprehension  starts  at  100  percent.” 


16  MONTHS 


Tales  from  the  Front 


COUNTDOWN 


&  COUNTING 


mmm 

A  report  from  Paine 
Webber  Investment 
Strategist  Edward 
Kerschner  says  fears  of  Y2K  chaos  are 
being  "overblown"  by  consultants 
seeking  business,  according  to  The 
Wall  Street  Journal.  "While  not  every¬ 
thing  will  go  smoothly,  common  sense 
should  prevail,"  the  report  says.  Simi¬ 
larly,  a  report  from  consultancy  Cap 
Gemini  insists  that  only  one  out  of 
seven  companies  in  Europe  and  Amer¬ 
ica  will  not  be  able  to  complete  reme¬ 
diation  by  the  turn  of  the  century. 


month's  story  on  the  SPG  Y2K  confer¬ 
ence  in  New  York  City  (see  "Apoca¬ 
lypse  Soon,"  CIO  Section  1 ,  July  1 , 

1 998),  is  planning  on  moving  his  fam¬ 
ily  to  Taos,  N.M.,  to  avoid  what  he 
anticipates  will  be  a  Y2K  apocalypse. 


njHiMiaam 

Time  Bomb  2000:  What  the  Year 2000 
Computer  Crisis  Means  to  You!  (Simon 
&  Schuster,  1 998)  is  the  provocatively 
titled  book  co-authored  by  program¬ 
ming  guru  Ed  Yourdon  and  his 
daughter  Jennifer  Yourdon,  a  Wall 
Street  financial  analyst.  The  Yourdons 
cite  experts  who  predict  that  fewer 
than  80  percent  of  America's  comput¬ 
er  systems  will  be  fixed  by  Jan.  1, 

2000.  Yourdon,  as  reported  in  last 


If  you  thinkT-shirts,  caps,  coffee 
mugs,  mousepads  and  watches  will 
help  motivate  your  Y2K  staff,  check 
out  the  merchandise  offered  by  Look¬ 
ing  Glass  Partners  ( www.y2kstuff. 
com);  we  can't  decide  if  ou r  favorite  is 
the  stress-busting  rubber  PC  that  you 
can  crush  in  the  palm  of  your  hand  or 
the  mug  that  reads,  "The  end  of  the 
world  as  we  00  it!" 


Y2K  BULLETIN  BOARD 


Looking  for  Y2Kemployment  (yeah, 
right)?  Need  a  Y2K  expert?  Want  to 
find  someone  who's  already  figured 
out  how  to  remediate  your  particular 
application?  Visit  www.mbs-program. 
com,  sponsored  by  the  Year  2000  In¬ 
formation  Network,  to  post  and  read 
messages  targeting  Year  2000  project 


managers.  RFPs,  product  inquiries 
and  calls  for  technical  papers  are  all 
welcome. 


JUST  GETTING  STARTED? 


The  International  Telecommunications 
Union  (ITU)  has  a  valuable  tool  kit  on  its 
Web  site  (www.itu.int/y2k)  for  getting 
remediation  underway;  it  includes  a 
team  organization  chart,  project  plans, 
testing  checklists  and  templates  for 
recording  inventories  of  opera¬ 
tional  systems,  networks  and 
embedded  systems. 


«.ii:ui»-w:i.nwA 

See  "Interview  with  the 
Czar,"  Page  56,  for  an  inter¬ 
view  with  the  federal  gov¬ 
ernment's  Y2K  czar,  John 
Koskinen. 

For  up-to-date  Y2K  informa 
tion,  visit  www.cio.com/ 
y2kforum.  Send  Y2K  infor¬ 
mation — funny  or  scary — 
to  hbaldwin@cio.com. 
-Howard  Baldwin 
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imarks  of  Amdahl 
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(800)  223-2215  ext.  ciolO  or  www.amdahl.com/cio 


AMDAHL  PROUDLY  RE-INTRODUCES  RAW  POWER 


The  Amdahl  Millennium"  700  Series  are  the  most  powerful  CMOS 
servers  in  the  universe.  This  year.  Next  year.  Every  year. 


•  Amdahl  TDMF™data  migration  software  does  the  world’s  fastest 
S/390  data  migration  -  and  makes  it  transparent.  Amdahl 
Operational  Services  makes  it  happen. 


is 
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•  Talk  to  Amdahl.  The  pride  is  back. 


Trendlines 


Vortex  is  already  proving  popular  with 
the  disabled.  Legally  blind  people,  or 
those  with  a  vision  capability  of  5  percent 
or  less,  are  achieving  reading  speeds  of 
750  words  a  minute,  according  to  Tenax. 
Professional  researchers  are  also  enthusi¬ 
astic  buyers,  says  High.  The  latest  version 
opens  documents  in  their  native  formats, 
such  as  Microsoft  Word. 

Priced  at  $29.95,  Vortex  runs  on  PCs 
with  Windows  3.1  or  higher,  or  on  Macs 
and  Unix  machines  with  Windows  emu¬ 
lation.  For  a  demonstration  of  the  prod¬ 
uct,  check  out  the  company’s  Web  site: 
www.vallier.com/tenax/vortex.html.  ■ 


Findings  Staffing  Solutions 


"LITTLE"  WOMEN 

The  proportion  of  IT  professionals 
who  are  women  has  dropped  from 
30  percent  in  1 989  to  only  15  percent 
today,  according  to  a  study  conducted 
by  London-based  NOP  Research  Group 
for  Microsoft  Corp. 


SOURCE:  ALLEYCAT  NEWS 


The  Hiring  Line 


Critical  Condition 

For  441  fast-growing  U.S.  companies  with  serious 
staff  shortages,  IT  personnel  are  the  second-hardest 
employees  to  find  and  recruit 


|  Type  of 

Percentage  of 

j  Employee 

Companies  in  Need 

Experienced  professionals/technicians 

54 

1  Skilled  IT  personnel 

1  . . 

43 

Experienced  sales  and  marketing  executives 

33 

)  Production/semiskilled  workers 

27 

Entry-level  workers 

25 

|  Administrative  support 

21 

Top-level  managers/executives 

15 

|  Young  trainees  on  career  path 

15 

Other 

9 

|  SOURCE:  COOPERS  &  LYBRAND  TRENDSETTER  BAROMETER 

1  ._  \l 

Regular  readers  of  this  magazine  don’t  need  to  be 

told  that  there’s  a  severe  shortage  of  qualified  IT  personnel 
today,  but  a  recent  survey  reveals  the  scope  of  the  problem 
among  some  of  the  country’s  more  progressive  compa¬ 
nies — and  outlines  what  they’re  doing  to  deal  with  it. 

As  part  of  its  Trendsetter  Barometer  series,  consulting  firm 
Coopers  &C  Lybrand  LLP  asked  U.S.  businesses  that  were 
among  the  fastest-growing  over  the  past  five  years  about  their 
staffing  situations.  Seven  of  10  CEOs  from  441  of  these  com¬ 
panies  told  Coopers  &  Lybrand  that  they’re  having  problems 
acquiring  the  experienced  employees  they  need  to  continue 
with  aggressive  expansion  plans.  More  than  half  of  the  441 
have  launched  new  employee  attraction  and  retention 
programs. 

The  initiatives  include  beefed-up  compensation 
and  benefits  packages,  but  they  also  go  beyond  those 
traditional  measures:  Thirty  percent  are  rewarding 
current  workers  for  referring  colleagues  who  get  hired; 
25  percent  are  allowing  more  flexible  work  hours;  21 
percent  are  establishing  new  career-development  pro¬ 
grams;  and  20  percent  are  stepping  up  on-campus 
recruitment  of  new  graduates.  Also  mentioned  were 
developing  student  internships,  offering  signing  bonuses, 
recruiting  skilled  employees  from  abroad,  hiring 
entry-level  workers  from  welfare  and  instituting  day¬ 
care  programs. 

Survey  respondents  identified  three  categories  of  em¬ 
ployees  as  most  in  demand — experienced  professionals 
or  technicians  (sought  by  54  percent),  skilled  IT  person¬ 
nel  (43  percent),  and  experienced  sales  and  marketing 
executives  (33  percent).  “The  need  for  experienced  pro¬ 
fessionals,  technicians  and  IT  workers  is  significantly 
greater  at  high-tech  firms”  than  elsewhere,  says  Jim 
Lafond,  a  Coopers  managing  partner  based  in  McLean, 
Va.,  and  Washington,  D.C.  Meanwhile,  nontech  businesses 
have  a  greater  need  for  production  workers,  administrative 
support  staff  and  entry-level  employees.  (See  “Critical  Condi¬ 
tion,”  at  left.) 

More  than  a  quarter  (27  percent)  of  respondents  say  they’ve 
felt  the  pinch  of  the  worker  crisis  through  one  or  more  of  the 
following:  scaled-back  growth  estimates,  deByed  or  cancfjjed 
initiatives  and  overhiring  in  anticipation  of  a  tighter  market. 
The  worker  shortage  has  forced  1 1  percent  of  the  enterprises  to 
reduce  revenue  estimates  for  the  next  12  months. 

“These  firms  are  simply  not  able  to  fill  their  orders  and  have 
had  to  scale  back  revenue  growth  by  9.44  percent  on  average,” 
says  Lafond.  “The  composite  revenue  for  all  [of  these]  firms  in 
the  year  ahead  would  have  been  a  full  point  higher  if  enough 
key  employees  had  been  available.” 

For  more  information,  visit  www.us.coopers.com/eas/ 
trendset.  -David  Pearson 
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Because  memory  should  be  the  furthest  thing 

from  your  mind. 


That’s  why 
there’s  VisionTek. 
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VisionTek,  Inc. 
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The  decisions  you  make 
in  today's  changing 
client/server  world 
can  put  your  IS 
organization  on  track 
for  the  future.  Or  saddle  you  with  the 
wrong  technology  for  years  to  come. 

Beyond  the  expected 

/  So,  it's  not  surprising  that  you 
®  '  haven't  had  time  to  think  about  mem¬ 
ory  lately.  That's  why  we  go  beyond 
simply  providing  products  to  give 
you  the  expertise  that  makes  memory 
management  so  easy,  you  won't  have 
to  think  about  it. 

That  means  advising  you  of  market 
forces  that  will  affect  your  budgets. 
Tailoring  buy-back  programs  to  help 
you  upgrade  more  economically.  Even 
minimizing  downtime  with  loaners, 
on-site  support  and  more. 

Beyond  the  competition 

When  you  spec  VisionTek,  you 
get  the  same  quality  memory 
we  supply  to  leading  system 
OEMs.  You  also  get  the  atten¬ 
tion,  service  and  flexibility  that 
giant  vendors  simply  don't  offer. 
Now  that's  an  easy  choice. 

Call  your  authorized  reseller  or 
1-800-360-7188. 


more  than  memory 

visiontek 
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Think  Tank 


By  Tom  Davenport 


MAKING  THE  MOST  OF  AN  I  N  F  O  R  M  AT  I  O  N  -  R  I  C  H 


ENVIRONMENT 


I  Was  Just  Thinking. . . 

Anticipating  a  move  to  Boston,  this 
columnist  looks  forward  to  Mike  B amide's 
column  in  The  Boston  Globe  and  envies 
Barnicle’s  literary  license  in  his  occasional 
rambling  collections  of  one-  or  two-liners. 
Here’s  his  version. 


utilized  by  most  companies. 

I  think  Internet  chat  sites  have  a  lot 
in  common  with  CB  radio. 

A  lot  of  kids  in  the  “net  genera¬ 
tion”  aren’t  afraid  of  computers,  but 
they’re  not  particularly  interested  in 
learning  much  about  how  they  work 
either.  Like  automobiles,  many  drive, 
but  few  become  mechanics. 

I’d  bet  that  most  users  of  new  PCs 
will  never  fill  up  the  6.4GB  disk  drives 
they  have. 

A1  Gore  is  a  smart  guy,  but  he  knows 
just  enough  about  information  tech¬ 
nology  to  be  dangerous. 

My  worst  nightmare  would  be  hear¬ 
ing  that  I’ve  just  been  named  CIO  of 


VIRTUALLY  EVERY  I.T.  VENDOR, 
both  software  and  hardware, 
is  beginning  to  use  the  word 
knowledge  in  its  marketing. 
I  am  afraid  that  it  won’t  be 
long  before  we  are  really  tired  of 
that  word. 

A  large  number  of  ERP  implemen¬ 
tations  were  justified  on  the  basis  of 
fewer  IT  people  being  needed.  But  in 
my  travels,  I  have  found  only  one 
company  out  of  hundreds  that  said  it 
has  actually  laid  off  IS  personnel. 

I  vote  for  Dave  Duffield  (president 
and  CEO)  of  PeopleSoft  Inc.  as  the 
nicest  guy  in  the  IT  vendor  commu¬ 
nity.  And  Scott  McNealy  (chairman, 
president  and  CEO  of  Sun  Micro¬ 
systems  Inc.)  as  the  most  unhealthily 
obsessed  by  Bill  Gates. 

Let’s  face  it — the  PC  has  become  an 
appliance.  A  faster  Pentium  processor 
is  about  as  exciting  as  a  more  efficient 
refrigerator  compressor. 

The  IT  profession  seems  to  be 
pretty  good  lately  at  importing  senior 
talent  from  other  business  functions. 
The  question,  of  course,  is  when  we 
will  become  good  exporters. 

Sorry,  Bill,  but  we  don’t  really  need 
Windows  98.  You  can  keep  it.  And 
while  you’re  at  it,  hang  on  to  Office  98. 

The  Mac  to  PC  transition  is  hardly 
as  dramatic  a  transition  as  some 


diehards  would  have  it. 

Women  I  know  are  much 
more  reasonable  about  IT  than 
men.  As  with  automobiles, 
they  primarily  care 
about  reliability. 

When  someone  asks 
my  wife  what  kind 
of  car  she  drives, 
she  replies,  “I  have 
a  white  car.”  When 
asked  about  her 
computer,  “It’s 
beige.” 

Is  anyone  else 
self-conscious 
about  the  idea  of 
talking  to  your  com¬ 
puter  with  the  mat¬ 
uration  of  speech 
recognition  technol¬ 
ogy?  And  imagine  the 
cacophony  with  every¬ 
one  chatting  away  on 
airplanes. 

I  love  my  PalmPilot,  but 
it  works  much  better  with  a 
little  leather  case  that  has  a 
paper  pad  attached.  Most 
phone  messages  just  aren’t 
worth  entering  into  the  Pilot. 

Lotus  Notes  is  just  too  com 
plicated.  Never  has  so  much 
functionality  been  so  under- 


the  IRS. 

Web  page  design  is  99  per¬ 
cent  art,  1  percent  science. 
When  a  Web  page  changes,  it’s 
almost  always  because  of  a  new 
fad  in  the  field. 

Ten  years  and  billions 
of  dollars  were  spent 
developing  high-defi¬ 
nition  TV,  but  nobody 
knows  whether  view¬ 
ers  really  want  it  or 
how  money  can  be 
made  from  it. 

Microsoft  has  fig¬ 
ured  out  that  the  best 
approach  to  knowl¬ 
edge  management  is  hir¬ 
ing  the  smartest  people 
in  the  first  place. 

There  can’t  be  many 
jobs  that  are  more  in¬ 
teresting  in  the  world 
today  than  CIO  of  a 
major  corporation.  Yet 
no  one  ever  grows  up 
wanting  to  be  one. 

We  should  hold  an 
IT  equivalent  of  the 
Nuremberg  Trials  for 
those  who  said  client/ 
server  computing 
was  going  to 
save  money. 

I  never 
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thought  that  network  computers  would 
take  off.  Any  user  with  any  say  over 
what’s  on  his  desktop  prefers  to  control 
his  own  resources. 

Companies  should  start  charging  by 
the  message  for  e-mail.  The  more  recip¬ 
ients,  the  greater  the  hit  on  your  budget. 
And  maybe  sending  a  message  to  senior 
managers  should  cost  more. 

Silicon  Valley  is  generally  a  pretty 
unattractive  place.  Maybe  IT  entre¬ 
preneurs  and  technicians  thrive  on 
ugliness. 

Enough  already  with  all  of  these  mag¬ 
azine-sponsored  awards  and  top  100 
this  and  that  lists.  They’ve  always  been 
more  show  than  substance,  and  the 
trend  is  worsening. 

I  think  we’re  on  the  verge  of  realizing 
that  we  vastly  overspend  on  IT. 
Unfortunately,  since  IT  sales  drive  the 
U.S.  economy,  that  realization  won’t 
necessarily  be  good  for  business. 

I  know  a  good  many  highly  educated 
people  who  have  never  used  the  Web. 


And  only  50  percent  of  the  world’s  pop¬ 
ulation  has  ever  heard  a  dial  tone. 

Data  mining,  OLAP/ROLAP,  decision 
support,  executive  support  systems — 
they’re  all  pretty  much  the  same  thing. 
And  they’re  still  not  used  very  effectively 
in  most  organizations. 

The  most  important  factor  affecting 
your  willingness  to  learn  about  new 
technologies  is  not  age  but  rather  mar¬ 
ital  and  child-rearing  status.  Most  sen¬ 
sible  folks  would  rather  spend  time 
with  their  spouses  and  children  than 
goof  around  on  a  PC.  With  divorce 
rates  so  high,  however,  we’re  able 
to  accommodate  a  fast  pace  of  technol¬ 
ogy  change  (the  comment  above  about 
my  wife  may  give  me  more  time  to 
experiment). 

Shouldn’t  we  in  IS  be  a  bit  embar¬ 
rassed  about  the  year  2000  thing?  What 
other  part  of  your  organization  has 
caused  a  trillion-dollar  problem  that 
some  say  will  bring  down  the  world 
economy? 


If  the  year  2000  problem  plunges  us 
into  a  global  depression,  don’t  you  think 
residents  of  other  planets  will  be  snick¬ 
ering  at  us? 

There’s  a  lot  of  talk  now  about  how 
computers  today  resemble  the  early 
years  of  electricity  in  business.  I  wonder 
what  happened  to  the  Vice  Presidents  of 
Electrification  when  that  technology 
became  easier  to  use? 

Information  overload  will  be  the 
biggest  problem  of  the  next  decade. 

Nobody  I  know  (and  nobody  in  the 
audiences  to  which  I  speak)  feels  that 
they  have  an  effective  personal  informa¬ 
tion  environment.  If  you’re  an  exception, 
send  me  an  e-mail!  HEI 


Thomas  H.  Davenport  is  a  professor  of 
management  systems  at  the  Boston 
University  School  of  Management  and 
director  of  the  Andersen  Consulting 
Institute  for  Strategic  Change.  Reader 
comments  can  be  sent  to  him  care  of 
letters@cio.com. 


Automatically. 


PinnP^in 

The  Year  2000  Tool  for  FOCUS 

Now  you  can  automate  the 
date  field  conversion  in  all  your 

FOCUS  applications.  You've  dreamt  about  it. 
You've  even  closed  your  eyes  and  wished  for  it.  And 
now,  here  it  is...PinnPoint+.  Starting  today  you  have 
the  ability  to  automatically  convert  date  fields  within 
all  your  FOCUS  applications.  PinnPoint+  is  the  only 
tool  for  FOCUS  that  finds  both  obvious  and  hidden 
date  references,  and  allows  you  to  automate  the  format 
change.  Plus,  it  drills  down  to  indicate  where  each 
reference  exists  across  the  application.  Identifies  dates 
in  Masters,  DEFINES,  TABLE,  COMPUTES,  Dialogue 
Manager,  and  more.  Processes  code  from  all  major 

platforms:  MVS,  VM,  VMS,  UNIX, 
and  PC.  Change  the  way  you 
change  what's  changing, 
call  1 -888-PinnPoint 
I  (1-888-746-6764), 
aM  »  W.  I  ll  1 1  international  calls  - 

lEBF  (860)  632-7766,  today 
HpF  for  a  free  PinnPoint+ 


poking 


demo  CD. 


www.PinnPoint.com 


DECISION  SYSTEMS. 


FOCUS  is  a  trademark  of  Information  Builders,  Inc. 
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Dealing  with  vendors  is  ail  about  relationships:  It's  knowing 
how  to  give  and  take.  And,  especially,  when  to  say  goodbye. 


HOWARD  BALDWIN 


DearAbbie :* 

I  have  finally  found  the  perfect  vendor  partner 
to  fulfill  my  needs.  He  has  all  the  characteris¬ 
tics  that  I’ve  been  looking  for:  strength,  enthu¬ 
siasm  and  good  breeding.  Since  we’ve  met, 
we’ve  spent  days  talking  about  how  exciting 
the  future  is  going  to  be  once  we  tie  the  knot. 
So  why  am  I  so  nervous ? 

-Sleepless  CIO 


Dear  Sleepless:  You’re  not  alone.  When  did  relationships  become  so 
darn  complicated?  Why  does  life  in  the  enterprise  feel  like  junior  high 
school  all  over  again?  Because,  just  as  in  junior  high,  the  world  of  the 
CIO  is  in  flux.  Only  instead  of  raging  hormones,  you’ve  got  raging 
uncertainties.  You’re  facing  a  grisly  collision  of  choice  and  consolida¬ 
tion.  Sure,  you  have  more  options  than  ever  before.  Suitors  serenade 
you  daily,  each  insisting  that  it’s  the  one  to  whom  you  should  make  a 
lifelong  commitment  because  it’s  offering  the  best  services  at  the  best 
price.  But  at  the  same  time,  those  suitors  (or  vendors)  are  merging  at  a 

horrific  rate,  and  you  want  to 

"Note  to  attorneys  for  Universal  Press  Syndicate:  forge  a  relationship  with  the 

The  Abbie  cited  in  the  fictional  letter  above  is  Strongest  One.  Simply  put,  yOU 

CIO  Editor  in  Chief  Abbie  Lundberg,  not  your  want  yOUT  prom  date  tO  be  Mel 

trademarked  columnist  Abigail  Van  Buren.  ‘  r  . 

Gibson,  not  Henry  Gibson. 
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WHAT'S  INSIDE 


CIOS  AND  I.T.  VENDORS  ARE  MORE 
strategic  to  business  success  than  ever 
before,  and  now  vendor  relationship  man¬ 
agement  is  the  new  hot  skill.  This  feature 
package  showcases  its  various  stages. 

►  The  Dating  Game  . 34 

POTENTIAL  PARTNERS:  SIZING  THEM  UP 
The  biggest  challenges  to  finding  com¬ 
patible  vendor  partners 

►  Tying  the  Knot  . 44 

FOR  BETTER  OR  WORSE 

How  to  improve  your  ability  to 
collaborate  effectively  with  vendors 

►  Parting  Ways . 52 

BREAKING  UP  IS  HARD  TO  DO 

Why  your  skill  at  managing  vendors 
can  make  or  break  your  career 
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Vendor  Relationships:  Overview 
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An  informal  poll  of  CIO  readers  revealed  that  CIOs  are 
making  more  out  of  their  strategic  relationships  than  they 
used  to.  Bear  in  mind  that  a  self-selected  sample  is  not  sta¬ 
tistically  significant,  but  here’s  what  they  said.  Twice  as  many 
CIOs  said  they’d  increased  the  number  of  vendors  they  con¬ 
sidered  strategic  in  the  past  three  years.  In  an  overwhelming 
consensus,  they  attributed  the  increase  in  strategic  vendors 
to  the  growing  complexity  of  technology  and  the  growing 
importance  of  technology  to  their  business. 


So  there’s  no  doubt  that  the  vendor-customer  relationship 
is  becoming  more  important  to  the  CIO.  To  help  you  deal  with 
this  dizzying  courtship  process,  and  with  a  doff  of  the  hat  to 
magazines  like  Cosmopolitan  and  Mademoiselle,  CIO  has  put 
together  a  special  section  on  managing  vendor  relationships 
(as  Senior  Writer  Tom  Field  observes,  they’re  called  partners 
when  things  are  going  well  but  vendors  when  they’re  not).  With 
this  issue  in  hand,  we’re  confident  you  won’t  get  stuck  in  the 
office  on  a  Saturday  night  wondering  where  it  all  went  wrong. 

The  package  contains  three  articles  that  focus  on  the  arc 
of  most  relationships:  what  questions  you  should  ask  dur¬ 
ing  courtship,  how  to  keep  the  relationship  going  smoothly 
and  what  to  do  when  you  discover  the  two  of  you  just  aren’t 
compatible.  Online,  there’s  a  fourth  piece  of  the  package,  the 
transcript  of  a  CIO  roundtable,  in  which  four  CIOs  discuss 
vendor  management  with  Senior  Writer  Derek  Slater  at  a 
meeting  of  Information  Management  Forum  members  in 
February.  You  can  find  it  at  www.cio.com/arcbive/ 
080198_roundtable.html. 

The  courtship.  In  conversations  with  CIOs,  Senior  Writer 
David  Pearson  came  up  with  the  20  most  important  things  to 
say  when  you’re  contemplating  a  partnership  with  a  vendor. 
“Potential  Partners:  Sizing  Them  Up”  (Page  34)  isn’t  cribbed 


from  a  Cosmo  quiz,  that’s  for  sure.  Our  sources  recommend 
everything  from  the  congenial  to  the  confrontational.  You’ll 
find  some  wonderful  anecdotal  nuggets  here,  such  as  the  time 
one  CIO  casually  cornered  a  vendor’s  employee  and  asked  what 
happens  when  a  contract  has  a  cost  overrun.  (“We  get  paid 
more!”  the  employee  answered  gleefully.) 

The  relationship.  This  isn’t  just  about  having  someone  to 
go  out  to  dinner  with — it’s  about  having  a  partner  who’ll  stick 
with  you  through  good  times  and  bad.  After  all,  you’re  buy¬ 
ing  more  than  products;  today 
you’re  also  purchasing  services, 
skill  sets  and  ongoing  care.  In 
“For  Better  or  Worse”  (Page 
44),  Senior  Writer  Field  delves 
into  who’s  responsible  for 
maintaining  the  vendor  rela¬ 
tionship:  Should  it  be  everyone 
in  IS,  a  vendor  management 
team,  or  a  designated  relation¬ 
ship  manager?  (Almost  a  third 
of  survey  respondents  had 
either  a  vendor  manager  or  a 
department  with  those  respon¬ 
sibilities.)  He  also  looks  at  set¬ 
ting  the  metrics  for  a  relation¬ 
ship — how  you  make  sure  that 
the  give-and-take  doesn’t  be¬ 
come  grab-and-run. 

The  sinking  ship.  What  hap¬ 
pens  when  a  newly  appointed 
CIO  discovers  she’s  just  booked 
passage  on  a  relationship  that 
more  closely  resembles  the  Lusitania  than  the  Love  Boat f  Field 
follows  the  voyage  of  CIO  Cecilia  Claudio  as  it  becomes  obvi¬ 
ous  that  a  $30  million  outsourcing  deal  needs  to  be  torpedoed. 
But  as  Claudio  learned,  you  can’t  just  storm  away  when  things 
go  sour  (see  “Breaking  Up  Is  Hard  to  Do,”  Page  52).  One  legal 
source  advises  that  you  move  half  as  fast  as  you’d  like  to  in  this 
situation,  simply  as  self-protection.  Not  to  mix  transportation 
metaphors,  but  this  lawyer  urges  that  “the  last  thing  you  want 
to  do  is  shoot  the  pilot  before  he  lands  the  plane.” 

If  there’s  a  silver  lining  to  this  loss  of  independence,  it’s  that 
strategic  relationships  are  working  and  that  the  divorce  rate 
among  CIOs  and  vendors  is  lower  than  in  the  general  popula¬ 
tion.  Two-thirds  of  the  CIOs  who  responded  to  our  poll  said 
they  plan  to  either  increase  or  hold  steady  the  current  number 
of  strategic  vendors  they  have.  At  the  same  time,  a  full  90  per¬ 
cent  reported  that  relationships  with  their  vendors  had  either 
become  more  collaborative  or  stayed  the  same.  Sadly,  about  10 
percent  said  their  relationships  had  become  more  adversarial. 
That’s  the  kind  of  turmoil  that  makes  a  tough  job  even  worse. 

To  be  part  of  the  collaborative  90  percent,  read  on.  BE! 

Senior  Editor  Howard  Baldwin  can  be  reached  via  e-mail  at 
hbaldwin@cio.com. 
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EELING  BOMBARDED  BY  VENDORS  THAT  WANT  YOUR  BUSINESS  and  will  stop  at  noth¬ 
ing  to  catch  your  eye  and  win  you  over?  Don't  get  annoyed  with  all  those  calls,  letters  and 
invitations.  Start  dancing. 

With  every  request  for  your  attention  comes  a  new  opportunity  to  scope  out  the  best  offers  on 
the  floor.  What's  more,  the  mad  rush  to  win  your  favor  couldn't  have  come  at  a  better  time — with¬ 
out  those  hungry-eyed,  technology-partner  wannabes,  you'd  have  an  awful  hard  time  keeping 
current  with  the  latest  steps.  Besides,  every  great  vendor  relationship  begins  with  smart  vendor 
selection.  Our  only  advice  to  those  entertaining  pitches:  Cavort  away,  but  don't  say  yes  to  any 
proposals  for  a  more  permanent  relationship  before  you've  considered  the  wisdom  of  several 
CIOs  who  have  heard  every  line  in  the  book  and  learned  the  hard  way  not  to  fall  for  each 
enticing  promise. 

It  doesn't  matter  what  wares  are  before  you — there  are  certain  principles  that  ought  to 
guide  every  vendor  choice,  say  the  experts.  "Obviously  a  network-outsourcing  purchase 
requires  much  more  front-end  deliberation  than  the  purchase  of  a  $300  software  pack¬ 
age,"  says  Mark  Belk,  director  of  IT  marketing  for  Kimball  International  of  Jasper,  Ind.,  the 
erstwhile  piano  and  home  and  office  furniture  manufacturer. 

"[But]  it's  all  financial  exposure,"  adds  Jack  Dowling,  CIO  of  CompuCom  Systems 
Inc.,  a  Dallas-based  supplier  of  desktop  computers  and  technical  services.  "I  don't 

really  delineate  between  a  'commodity' 
purchase  and  a  major  or  'strategic' 
purchase.  I'm  tough  on  everyone  who 
wants  to  sell  me  something."  And  it 
goes  without  saying  that  no  matter  what  the  prospective  product  or  ser¬ 
vice — or  who  breaks  the  ice,  you  or  them — you  need  to  size  up  every 
potential  supplier,  partnerand  peddler  forthings  like  financial  health, 
availability  and  reputation.  But  beyond  the  basics,  what  can  you  ask  of 
Kimball's  Mark  Beik:  every  hopeful  vendor  to  ensure  that  you  consistently  buy  the  right  prod- 

Look  for  an  attentive 

partner.  ucts  and  services  at  the  best  prices  from  the  most  qualified  people? 
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new  technologies,  too.  For  more  answers,  better  answers,  reach  us  at  www.compaq.com/mileage  or  1-800-AT-COMPAQ. 
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Begin  by  conducting  the  kind  of  interrogation  through 
which  a  discriminating  debutante  puts  her  cotillion  date. 

There  must  be  50,000  ways  to  pick  your  partner — in  fact, 
that’s  about  how  many  questions  suitors  could  have  thrown 
at  them  by  vendor-selection  software  from  Decision  Drivers 
Inc.  in  Stamford,  Conn.,  the  GartnerGroup  Inc.  subsidiary 
that  helps  IT  managers  make  good  technology  buys.  Space 
restrictions  keep  us  from  reaching  for  that  kind  of  thorough¬ 


ness  in  these  pages,  but  we  do  offer  20  indispensable  queries 
and  comments,  culled  from  conversations  with  IT  executives 
and  vendor-market  analysts,  to  run  past  all  your  potential  part¬ 
ners.  You  may  want  to  change  the  wording  to  suit  your  situ¬ 
ation,  but  you  don’t  want  to  skip  these  points — unless  you’re 
satisfied  with  second-rate.  After  all,  when  the  music  stops, 
you  don’t  want  to  be  left  standing  with  aching  feet  and  wilt¬ 
ing  expectations. 


1 .  You  wouldn't  happen  to  have  your  com¬ 
petitors'  phone  numbers  handy,  would  you? 

No  matter  how  impressive  a  product, 
person  or  presentation,  be  sure  to  look 
at  others  for  comparison’s  sake — or  you 
set  yourself  up  to  be  taken  on  price, 
shortchanged  on  perks  or  blinded  to 
even  better  alternatives.  “The  rule  of 
three  tends  to  apply  for  me,”  says  Sue 
Kozik,  chief  technology  officer  for 
Penn  Mutual  Life  Insurance  Co.  in 
Philadelphia.  “There  are  exceptions.  I 
may  get  a  good  indication  as  to  who  the 
players  are  in  a  given  category  and  nar¬ 
row  the  field  to  just  two  before  even  send¬ 
ing  out  an  RFP.  Or  with  outsourcing  a 
data  center,  I  want  to  look  at  even  more 
than  three.”  Another  benefit  of  shopping 
around:  If  your  favorite  falls  through, 
you’ve  got  a  backup  waiting  in  the  wings. 

2.  Are  you  merger-minded? 

Things  could  change  in  a  hurry  should 
your  prospective  vendor  be  gobbled  up 
by  another  company  during  the  course 
of  your  relationship.  “We  went  through 
a  conversion  of  all  of  our  literature, 
installation  documentation  and  adver¬ 
tisements  to  a  digital  format.  At  first  the 
vendor  came  in  and  did  a  great  job,  but 
then,  after  a  year  or  so,  they  seemed  to 
forget  about  us,”  says  Belk.  “It  was 
pretty  obvious  that  these  people  weren’t 
interested  in  doing  business  with  us.  It 
turned  out  they  were  distracted  by  the 
process  of  being  acquired  by  a  larger 
firm.”  In  the  end,  Kimball  exchanged  the 
vendor  for  a  more  attentive  partner. 

3.  Can't  you  read  the  sign?  Blowing  smoke 
isn't  allowed  here. 

Adjust  your  antennae  for  overstatement- 
of-capabilities  detection.  “If  they’re  not 
willing  to  share  with  you  a  step-by-step 
approach  to  the  work  they  want  to  do 


for  you,  then  they  probably  haven’t 
thought  it  through  yet,”  says  Scott 
Heintzeman,  vice  president  of  knowl¬ 
edge  technologies  for  Carlson  Hospi¬ 
tality  Corp.  of  Minneapolis,  one  of  the 
country’s  largest  providers  of  leisure- 
travel  services.  “They  may  have  a  con¬ 
cept,  but  they  probably  haven’t  got  a 
solution  for  you.”  Look  for  vendors  that 
present  a  clear  road  map  of  the  project 
under  consideration.  “Never  trust  a 
secret  recipe;  when  the  project  ends,  it 
will  be  hard  to  figure  out  if  they  deliv¬ 
ered,”  adds  Heintzeman.  Another  sure 
sign  of  puffery:  grand  plans  for  tomor¬ 
row  juxtaposed  with  an  unexceptional 
product  set  today. 

4.  This  is  a  big  project,  but  don't  get  any  big 
ideas:  You  won't  own  it. 

If  you’re  accepting  bids  for  a  large  proj¬ 
ect,  budget  it  and  parse  it  off  one  phase 
at  a  time.  “I  don’t  like  any  project  to 
have  more  than  a  six-  to  nine-month  life 
to  it,”  says  Heintzeman,  who  thinks 
multiyear  projects  tend  to  expand 
infinitely  and  never  reach  completion. 
“No  matter  what  kind  of  project  you’ve 
got,  chunk  it  down  so  you  can  deliver 
pieces  in  short  windows,  where  every¬ 
one  can  stay  focused  and  engaged.  Then 
launch  and  fund  another  phase  of  the 
project,  if  needed.” 

Sounds  like  milestones  in  the  contract, 
no?  Not  quite,  says  Heintzeman.  “With 
milestones,  you  still  have  one  con¬ 
tract;  the  vendor  knows  you’re  on  the 
hook  with  them  for  the  whole  project. 
Then  milestones  tend  to  slip,  along 
with  motivation  levels.  When  the  con¬ 
tract  has  a  finite  budget — a  defined 
beginning  and  end — and  they  have  to 
satisfy  you  to  get  the  next  contract, 
that  puts  a  very  different  light  on  the 
project.” 


5.  Looking  to  advance  your  bleeding  edge? 
Don't  look  at  us. 

If  the  vendor  hasn’t  provided  you  with 
the  name  and  number  of  a  reference 
whose  size  and  situation  resemble  yours, 
you’re  being  asked  to  serve  as  a  test  sub¬ 
ject.  Don’t  do  it. 

6.  If  you're  not  prepared,  I  will  be — to  pre¬ 
vent  you  from  wasting  my  time,  that  is. 

It’s  not  hard  to  spot  the  vendors  that 
didn’t  do  their  homework  on  you,  your 
company  and  your  industry  prior  to 
making  their  presentation.  They’re  the 
ones  with  more  questions  than  answers. 
Open  the  trap  door  and  let  them  fall. 

7.  Nice  bells  and  whistles,  but  where  is  what 
I  asked  for? 

Have  a  clear  idea  what  you’re  looking 
for  before  entertaining  pitches.  If  you 
don’t  know  what  it  is  you  want  and 
you’re  not  able  to  communicate  specific 
ideas  of  what  you’re  looking  to  accom¬ 
plish,  vendors  will  often  interpret  your 
hazy  ways  as  an  invitation  to  pad  the 
pitch  with  unnecessary  trimmings.  “It’s 
fine  to  be  open  to  new  possibilities  you 
hadn’t  considered  and  ask  for  a  recom¬ 
mendation,”  says  Belk.  “But  why  court 
confusion?” 

8.  Where  are  you  headed  and  how  are  you 
going  to  get  there? 

Mission  and  vision  matter.  Beyond  the 
vendor’s  current  position  vis-a-vis  its 
competitors,  what  are  the  signs  it’ll  be  in 
good  shape  three  to  five  years  from 
now?  Along  with  the  standard  financial- 
health  checking  you  need  to  do,  ask 
about  staff  turnover  and,  for  product 
suppliers,  investment  in  R&D  as  a  per¬ 
centage  of  overall  budget.  In  the  case  of 
a  potential  long-term  partnership,  ask  to 
see  the  vendor’s  business  plan. 
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Second,  don’t  rely  on  the  vendor’s 
own  references.  Usually  they’ll  give  you 
only  screened  customers.  “If  someone  is 
a  player  in  the  area,  some  member  of  my 
peer  group  will  have  had  some  dealings 
with  them,”  says  Kozik.  “And  I  find  that 
peer  group  very  willing  to  share,  even  if 
we’re  in  the  same  industry.  It’s  not  like 
we’re  trading  industry  secrets.  We  are 
trading  perceptions  of  support.” 

Finally,  be  as  tough  with  the  refer¬ 
ences  as  you  are  with  the  vendors. 
“You’d  be  surprised  how  many  vendors 
can’t  put  me  in  touch  with  someone 
they’ve  absolutely  delighted,”  says 
Joseph  M.  Treese,  Atlanta-based  direc¬ 
tor  of  worldwide  information  technol¬ 
ogy  for  the  packaging  division  of  Mead 
Corp.  “Or  they  can’t  do  it  quickly — 
and  speed  can  be  very  telling  in  this 
area.” 


1 3.  It's  very  nice  to  grill  you  virtually. 

If  you  can’t  make  it  to  the  presentation, 
make  sure  to  compile  your  questions 
and  give  them  to  a  manager  who  can.  “I 
have  to  live  with  the  results,  whether  I 
was  present  for  the  presentation  or  not,” 
says  Dowling. 


1 4.  Shiny  baubles  are  always  tempting,  but 
we'll  pass  for  now. 

Shy  away  from  technologies  in  their  first 
“model”  year.  “Every  now  and  then, 
some  hot  technology  comes  along  and 
you  have  to  deal  with  a  new  guy,”  says 
Frank  Barbee,  manager  of  IT  for  Phillips 


Carlson  Hospitality's 
Scott  Heintzeman:  Avoid 
vendors  with  a  concept 
but  no  solution. 


1 0.  This  is  delicious,  but  I  don't  make  deci¬ 
sions  over  dinner. 

“Friendly  phone  calls,  e-mails  and 
lunches  with  executives  are  pleasant,  but 
frankly  I  don’t  have  time,”  says  Kozik. 
“The  sooner  the  firm  introduces  me  to 
those  people  who  will  actually  be 
working  with  me,  the  more  likely  I 
am  to  go  with  them.”  Also,  beware 
baiting  and  switching — introductions 
to  superstar  staffers  who  could  fade 
from  sight  once  the  work  is  underway. 
There’s  no  sure  way  to  ensure  that  you 
won’t  be  set  up  for  that  little  scam, 
which  may  well  be  unintentional  in 
today’s  staff-short  environment,  but  you 
can  ask  to  meet  several  layers  of  talent  to 
make  sure  the  firm  has  sufficient  depth — 
to  which  you  can  demand  access  later. 


9.  Will  you  stick  to  the  sheet  music  or  sit  in 
on  extended  jam  sessions? 

In  other  words,  what’s  the  vendor’s 
interest  in  you  and  your  company? 
“When  a  vendor  comes  in  to  do  a  par¬ 
ticular  piece  of  work, 
I’m  interested  in 
their  insights  and 
observations  as 
they  talk  to  people 
and  collect  data,” 


ll.Vehafvays... 

See  how  vendors’  stories  hold  up  under 
pressure.  “Grilling  can  be  as  simple  as 
playing  devil’s  advocate,”  says  Dowling. 
“Make  it  as  difficult  for  them  as  possi¬ 
ble  without  being  uncivil.  Ask  a  lot  of 
hard  questions.  If  they’re  good,  they’ll 
appreciate  the  opportunity  to  show  just 
how  prepared  they  really  are.” 

“Tell  them,  ‘We  don’t  think  you  do  a 
good  job  in  this  area;  how  are  you  going 
to  commit  to  us  that  you  will?”’  adds 
Angelo  Privetera,  vice  president  of  infor¬ 
mation  and  technologies  for  HDR  Inc., 
an  Omaha,  Neb.-based  architecture  and 
engineering  design  firm.  “Then  sit  back 
and  watch  their  response.” 


says  Kozik.  “Inevitably,  they’ve  got  a 
fresh  set  of  eyes.  They  can  see  things  in 
ways  I  can’t.  If  they  see  something  in  the 
course  of  their  travels  that  they’d  be  will¬ 
ing  to  share,  that  can  really  help  me  val¬ 
idate  or  refute  our  internal  processes.” 
Team  spirit  alone  may  not  be  enough  to 
determine  who  gets  the  contract  and 
who  gets  left  behind,  but  it  can  be  all 
that  separates  two  or  more  identically 
qualified  vendors. 


12.  Who  says? 

A  few  pointers  on  checking  references. 
First,  do  it.  “One  company  soliciting  work 
with  us  gave  us  their  list  of  so-called  ‘sat¬ 
isfied  customers,”’  says  Heintzeman.  “I 
called  and  got  an  earful.”  Which  is  to  say, 
he  got  the  insight  he  needed  to  drop  them 
out  of  contention.  “A  lot  of  people  just 
glance  at  the  list  and  say,  ‘They’ve  done  all 
this  work;  I  guess  they’re  good.’  You 
really  have  to  call  those  references.” 


project  you've  got,  chunk  it  down 
in  short  windows. 


w 


-SCOTT  HEINTZEMAN 
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Penn  Mutual's  Sue 
Kozik:Gofor"The 
Rule  of  Three." 


Petroleum  Co.  of  Bartlesville,  Okla. 
“One  of  the  things  we  do,  especially  if 
it’s  a  software  package,  is  force  the  firm 
to  put  the  software  in  escrow.  So  if  it 
goes  belly  up  we  still  have  the  software. 
The  way  things  are  moving,  so  many  of 
these  little  companies  pop  up  today  and 
you  just  don’t  know  if  they’re  going  to 
be  around  tomorrow.” 

1 5.  Slow  down  or  you'll  oversell  me. 

If  you’re  buying  instead  of  building,  and 
you  probably  are,  look  past  the  claims  of 
off-the-shelf  capabilities  to  what  you  will 
need  to  do  to  glean  competitive  advan¬ 
tage  from  the  purchase.  “In  these  days  of 
common  functionality,  your  enterprise 
differentiates  itself  not  with  the  latest 
technology,  but  with  the 
business  processes  you 
wrap  around  it,”  says 
Kozik. 

1 6.  How  well  do  you  play 
with  others? 

“There  can  be  a  lot 
of  finger-point¬ 
ing  as  you  try 
to  integrate 
parts,  espe¬ 


cially  with  operational  products  and  ser¬ 
vices,”  says  Kozik.  “And  that’s  what  IT 
is  today,  a  parts-integration  process.” 
This  process  is  a  tough  one  to  gauge 
upfront — be  sure  to  lay  out  the  ground 
rules  for  the  communications  practices 
you  expect.  “You  have  to  be  ready  to 
take  responsibility  to  define  clearly  where 
their  work  ends  and  someone  else’s 
begins,  where  they  may  need  to  stretch, 
and  what  role  they  can  expect  you  as  the 
general  contractor  to  play.” 


extend  their  infrastructure — not  only  to 
us,  but  also  to  our  other  vendors  and 
customers.”  Make  sure  all  software  and 
hardware  products  are  interoperable 
with  most  other  vendors’  products  and 
the  vendor  has  a  solid  strategy  to  enable 
further  interoperability  via  the  Internet. 

19.  Mind  if  we  stop  by? 

“I  can’t  remember  a  single  vendor  we’ve 
bought  anything  from  in  the  last  three 
years  that  we  haven’t  gone  to  visit,”  says 


You  have  to  define  where  one  vendor's  work 

ends  and  another's  begins." 


-SUE  KOZIK 


1 7.  How  happy  are  your  employees? 

“Make  sure  vendors  are  not  just  throw¬ 
ing  bodies  at  projects  and  letting  them 
learn  on  your  time,”  says  Heintzeman. 
“They  need  to  hire  qualified  people  and 
train  them  through  their  own  method¬ 
ologies  and  processes  before  they  ever 
show  up  at  your  doorstep.”  Make  sure 
your  project  team  has  a  mix  of  senior 
people  with  long  track  records  of  on- 
time,  on-budget  projects,  plus  some 
junior  people  to  keep  costs  down  and 
provide  turnover  insurance. 

In  addition,  ask  every  potential 
vendor  to  explain  how  the 
H0  employees  in  the  project  will  be 
compensated  for  doing  a  good  job. 
Heintzeman  remembers  one  project 
where  he  took  one  of  the  employees 
aside  and  asked  about  incentives 
and  bonus  arrangements.  More 
candid  than  discreet,  the  employee 
replied  that  they  were  based  on  the  size 
of  the  project.  When  Heintzeman  asked 
what  happened  in  the  instance  of  an 
overrun,  the  employee  gleefully  replied, 
“We  get  paid  more!”  Moral:  Find  out 
the  compensation  structure  of  both  the 
line  staff  and  the  senior  management  of 
the  project.  If  they  won’t  tell  you,  move 
on  to  someone  who  will. 

1 8.  No  company  is  an  island.  Is  yours? 

“The  Internet  has  changed  everything,” 
says  Dowling.  “Today  more  than  ever, 
vendors  must  have  the  ability  to 


Belk.  A  tour  of  the  vendor’s  plants  and 
operations  will  give  you  a  lot  more 
insight  than  even  the  slickest  presenta¬ 
tion  in  your  office.  If  at  all  possible, 
observe  them  in  their  natural  habitat 
prior  to  letting  them  into  your  company. 

20.  Ever  fired  a  1 2-gauge  shotgun? 

“We  have  a  lodge  up  on  the  Great  Lakes 
where  we  take  high-level  people  with  the 
major  vendors,”  says  Phillips’s  Barbee. 
“Take  them  hunting  or  fishing — it  helps 
to  establish  the  relationship.  We  work 
hard  at  this,  though  it  may  not  sound  like 
hard  work  to  go  on  a  hunting  trip.”  Not 
everyone  has  access  to  a  screening  tool 
on  that  scale,  but  anyone  can  feel  a  per¬ 
son  out  for  compatibility  in  personal 
styles  and  values.  After  a  formal  presen¬ 
tation,  replay  the  session  in  your  mind 
and  ask  yourself  if  the  dialogue  seemed 
to  develop  into  a  natural  rapport. 

In  most  cases  it  doesn’t  take  a  week¬ 
end  in  the  woods  to  get  people  to  ease 
out  of  their  professional  roles  and  show 
their  true  colors.  Your  aim  is  to  figure 
out  if  a  prospective  vendor  would  make 
a  good  match  for  you  over  the  long  haul. 
And  you’ll  be  able  to  start  doing  that 
after  you’ve  said  yes  to  the  simple  propo¬ 
sition,  “May  we  have  this  dance?”  Just 
make  sure  you  get  all  your  questions 
answered  before  the  music  stops.  BEI 


Senior  Writer  David  Pearson  can  be 
reached  at  dpearson@cio.com. 
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Test  your  bet.  With  TransMillennium™  QUICK  check" 


There’s  no  way  to  guarantee  that  every  application 
will  run  in  the  Year  2000.  But  you  can  improve  your 
odds  by  performing  20XX  testing  and  by  checking  the 
quality  of  your  renovations.  With  TransMillennium™ 
QUICKchec/c™  from  Cap  Gemini  America. 

Send  your  renovated  code  to  our  Application 
Renovation  CenterSM.  In  as  few  as  two  weeks  we’ll 
provide  a  list  of  changes  to  help  you  check  the 


quality  of  your  renovations  for  any  code  the  ARCSMcan 
process.  We’ll  also  ship  back  a  DataMap,  toolset,  and 
documentation,  to  help  you  choose  baseline  test  data, 
age  your  data  for  20XX  testing,  and  generate  bridges 
—  without  manually  hunting  for  or  reentering  dates. 

Visit  our  Web  site  or  call  to  learn  more  about  our  testing 
offers  and  see  how  TransMillennium  QUICKchec/c  can 
help  you  improve  your  odds  of  winning  the  Y2K  race. 


1  888  Y2KT0DAY 


Cap  Gemini 


www.usa.capgemini.coni/y2h 


Cap  Gemini  America,  Inc.,  TransMillennium™  Services,  1114  Avenue  of  the  Americas,  29th  Floor,  New  York,  NY  10036 
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advantage,  not  just  an  information 
technology  issue.  It  will  become 
increasingly  important,  especially 
for  large  enterprises  needing  to  create, 
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invented  modern  management, 
claiming  that  the  idea  is  nonsense... 
he  has  most  certainly  spawned  the 
major  management  ideas  of  this 
century.  And  this  book,  beautifully 
written  and  fascinating  throughout, 
does  Drucker  justice  by  presenting 
an  omnibus  of  his  ideas  with  clarity, 
wit  and  critical  appreciation..." 
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as  Business 
Currency 


Choosing  the  right  vendor  isn't  enough.  To  get 
the  most  for  your  money,  you  must  commit, 
communicate  and  show  you  care. 

B Y  TO  M  F I E  L  D  s 


— T|  ENDOR  MANAGEMENT  AINT  what  it  used  to  be.  Time  was, 
\  /  an  IT  vendor  was,  well,  a  vendor.  If  Company  X  needed  a 
▼  basic  commodity  such  as  PC  service  or  software,  it  turned 

to  Vendor  Y,  which  presumably  offered  the  best  service  for  the  best 
price.  The  vendor  relationship  was  just  a  transaction,  and  the  only 


rement  people  to  review  bids  and  process  invoices 


But  in  today's  IT-driven  world.  Company  X  needs  more  than  prod¬ 
ucts.  It  requires  skills — access  to  the  new,  hot  technologies  and 
trained  staff.  And  so  Vendor  Y  has  given  way  to  the  HPs,  SAPs  and 
CSCs — service  providers  ( vendor  is  now  the  name  you  use  only  when 
you're  mad  at  them)  that  offer  far  more  than  mere  commodities. 
These  companies  bond  with  their  corporate  hosts;  they  provide  staff, 
project  management  and  long-term  strategic  planning.  In  some 
cases,  these  suppliers  perform  discrete  IS  operations — if  asked, 
they'll  even  take  over  a  company's  entire  IT  function — and  present 
themselves  now  not  as  the  "V"  word  but  as  the  "P"  word:  partner. 
To  keep  pace  with  that  new  breed,  IS  executives  have  had  to  develop 
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their  approaches  to  managing  evolving  vendor  relation¬ 
ships. 

Robert  R.  Ridout  knows  all  about  the  new  world  of 
strategic  vendor  management.  As  vice  president  of 
DuPont  Information  Systems  and  CIO  of  Wilmington, 
Del.-based  DuPont  Co.,  Ridout  oversees  a  global  IS  orga¬ 
nization  that  interacts  regularly  with  about  300  differ¬ 
ent  IT  vendors.  These  relationships  range  from  simple 
hardware  and  software  transactions  with  a  variety  of 
suppliers  to  an  ongoing  implementation  project  with  the 
German  enterprise  resource  planning  (ERP)  software 
giant  SAP  AG,  and  at  the  most  strategic  level  a  10-year, 
$4  billion  IT  outsourcing  alliance  with  Computer 
Sciences  Corp.  (CSC)  and  Andersen  Consulting.  CSC 
manages  the  data  center,  network  operations,  a  variety 


Voice  of  the  Vendors 

Relationship  management  isn’t  a  one-way 
street.  Vendor  executives  have  definite  ideas 
about  what  makes  a  successful  business 
relationship. 

Respect:  The  vendors'  senior  executives  want  access  to  their  cus¬ 
tomer  counterparts.  "If  the  CIO  doesn't  want  to  meet  with  me,  then 
that's  an  indication  of  the  value  that  I'm  bringing  to  the  relation¬ 
ship,"  says  Kevin  M.  Campbell,  resources  industries  global  managing 
partner  in  Andersen  Consulting's  business  process  management 
practice. 

Consistency:  Vendors  know  the  breakdown;  they  know  that  some 
of  them  are  treated  as  commodities  and  others  as  partners.  And 
they're  fine  with  that.  "But  we  don't  want  to  be  treated  one  way  one 
day  and  the  other  way  the  next,"  says  David  Rovinsky,  managing 
director  of  outsourcing  at  Unisys  Corp.  "That  [inconsistency]  is 
where  we've  seen  problems  happen." 

Guilt-Free  Profit:  Tom  Dougherty,  senior  vice  president  of  strategic 
IS  relationships  at  United  Healthcare  Corp.,  used  to  be  a  vendor.  He 
headed  aerospace  systems  delivery  for  IBM  Corp.  as  a  vice  president 
of  its  ISSC  subsidiary,  now  IBM  Global  Services,  and  he  understands 
what  some  CIOs  fail  to  realize:  "It's  OK  for  the  vendor  to  make  a 
profit,"  Dougherty  says.  And  if  they  aren't  given  that  allowance — if 
deals  are  structured  to  favor  only  the  customer — then  don't  expect 
vendors  to  invest  their  best  resources  in  the  account.  "You've  got  to 
treat  them  the  way  you  want  to  be  treated,"  Dougherty  says.  "Don't 
argue  about  pennies;  get  into  the  big  things." 

-T.  Field 

46  CIO  •  SECTION  1  /  AUGUST  1,  1998 


of  software  applications  and 
desktop  support,  while  Andersen 
manages  oil  and  chemical  indus¬ 
try-specific  application  develop¬ 
ment.  In  the  old  days,  when 
DuPont  dealt  with  far  fewer,  far 
less  strategic  suppliers,  vendors 
could  be  managed  by  the  com¬ 
pany’s  procurement  staff,  based 
purely  on  “the  most  bang  for 
your  buck”  standard.  But  today, 
with  vendors  not  just  support¬ 
ing  but  performing  some  of 
DuPont’s  critical  business  func¬ 
tions,  these  relationships  can’t  be 
held  merely  to  financial  mea¬ 
sures.  Instead,  Ridout  has  a  full¬ 
time,  65-member  global  team 
dedicated  to  managing  these 
relationships — to  developing, 
articulating  and  holding  suppli¬ 
ers  to  DuPont’s  business  goals 
and  performance  standards. 

“We’ve  got  to  manage  [rela¬ 
tionships];  we  can’t  just  let  them 
happen,”  Ridout  says.  “No 
matter  how  much  work  it  is, 
when  we’re  doing  these  [strategic  vendor]  deals,  we’ve 
got  to  realize  that  we’re  defining  our  future.  We’re  almost 
turning  vendor  relationship  management  into  the  new, 
hot  IT  skill.” 

In  DuPont’s  IS  organization,  vendor  management 
begins  at  the  top  with  an  IT  alliance  manager  who 
reports  directly  to  Ridout  and  devotes  the  majority  of  his 
time  to  overseeing  the  CSC/ Andersen  relationship.  This 
administrator  meets  at  least  weekly  with  CSC’s  and 
Andersen’s  top  executives  assigned  to  the  account  to 
review  performance  metrics  and  discuss  relevant  busi¬ 
ness  issues.  In  turn,  that  alliance  executive  oversees  a 
sourcing  manager  and  DuPont’s  vendor  management 
staff.  Not  all  of  the  relationships  are  directed  as  rigor¬ 
ously  as  the  CSC/ Andersen  deal — the  SAP  implementa¬ 
tion,  for  instance,  is  superintended  not  by  a  permanently 
assigned  staff  but  by  a  long-term  project  team  in  the 
United  States  and  Europe,  while  the  more  commodity¬ 
like  dealings  are  given  little  ongoing  management. 
Ridout’s  involvement  is  strictly  at  the  strategic  level,  with 
little  or  no  day-to-day  vendor  management  activity.  That 
centralized  structure  is  typical  of  large,  global  organiza¬ 
tions,  whose  IS  staffs  number  in  the  thousands  and  whose 
vendor  relationships  number  in  the  hundreds. 

At  the  other  end  of  the  spectrum  is  Allergan  Inc.,  an 
Irvine,  Calif.-based  global  eye-care  and  specialty  phar¬ 
maceutical  health-care  company  with  an  IS  staff  of  about 
170  worldwide.  Jeff  Winston,  Allergan’s  vice  president 
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DuPont  CIO  Robert  Ridout  says  relationships  won’t  just 
happen;  they  need  to  be  managed. 

of  IS  technology  and  operations,  presides  over  a  variety 
of  relationships  (far  fewer  than  DuPont’s,  although 
enough  that  Winston  could  not  quote  an  exact  number) 
with  such  diverse  vendors  as  SAP  and  Comdisco  Inc., 
which  leases  Vanstar  Corp.  PCs  to  Allergan’s  corporate 
headquarters.  Rather  than  assign  a  dedicated  vendor 
management  team  to  these  accounts,  Winston  spreads 
oversight  duties  among  his  own  and  each  of  his  senior  IS 
manager’s  daily  chores.  “Vendor  management  really  ends 
up  being  everybody’s  job  at  some  level  or  another,”  he 
says.  The  benefit  of  that  decentralized  management 
approach,  Winston  says,  is  that  his  employees  interact 
daily  with  vendors  and  have  come  to  think  of  them  not 
as  intruders,  but  as  co-workers.  “We  try  to  treat  vendors 
as  if  they  are  an  extension  of  Allergan’s  staff,”  Winston 
says.  “If  you  treat  vendors  like  a  third  party,  then  they 
will  behave  like  a  third  party,”  he  warns. 

Whichever  approach  they  take  to  management  struc¬ 
ture,  centralized  or  decentralized — and,  really,  there  is 
no  “right”  answer  to  that  question,  although  larger  com¬ 
panies  tend  to  be  most  able  and  willing  to  devote  full¬ 
time  personnel  to  vendor  management — CIOs  are  of  one 
mind  when  it  comes  to  interacting  with  vendors.  They 
differentiate  between  the  commodity  and  the  more  value- 


added  vendors,  and  then  they  apply  the  “80/20”  rule:  80 
percent  of  their  effort  is  directed  at  the  most  strategic  20 
percent  of  vendors. 

At  United  Healthcare  Corp.  in  Minneapolis,  Tom 
Dougherty,  senior  vice  president  of  strategic  IS  relation¬ 
ships,  approaches  vendors  at  two  levels  and  allocates 
management  resources  accordingly.  The  first  level 
includes  the  basic  PC  procurement/desktop  support  sup¬ 
pliers  such  as  GE  Capital  Services,  which  require  mini¬ 
mal  day-to-day  management  from  Dougherty’s  pro¬ 
curement  specialists.  But  at  the  second  level,  where  more 
strategic  vendors  such  as  IBM  Corp.  and  Unisys  Corp. 
oversee  UHC’s  data  centers  and  where  AT&T  Solutions 
provides  network  management,  Dougherty  oversees  a 
four-member  staff  dedicated  to  vendor  management.  The 
staff  meets  weekly  with  vendor  representatives  to  review 
service-level  agreements  and  any  business  changes  (acqui¬ 
sitions,  divestitures,  etc. )  that  have  arisen.  Dougherty 
attends  quarterly  “partnership  meetings”  with  executives 
of  the  level-two  vendors,  UHC  line  management  and  the 
vendor  management  staff.  There  senior  management 
discusses  UHC’s  long-term  objectives  and  how  the  ven¬ 
dors  can  help  meet  them.  “And  we  stress  [to  the  vendors] 
that  we  don’t  know  what  the  [technology]  answers  are,” 
Dougherty  says.  “We  expect  these  vendors  to  bring 
answers  to  the  table.” 

An  interesting  wrinkle  in  UHC’s  management  struc¬ 
ture  is  that  some  of  the  level-one  vendors — GE  Capital 
Services,  for  one — are  starting  to  offer  higher  levels  of 
service  such  as  break/fix  maintenance  and  total  cost  of 
ownership  planning.  These  new  services  don’t  quite  push 
the  vendors  into  level-two  status,  but  they  do  require  a 
higher  degree  of  interaction.  “When  your  vendor  goes 
from  counting  boxes  to  offering  service  levels,  how  do 
you  manage  it?”  Dougherty  asks.  “We’re  trying  to  deter¬ 
mine  what  [level  of  management]  fits.” 

UHC  has  already  modified  its  approach  to  vendor 
management.  Until  April,  when  Dougherty  held  the  title 
of  CIO  of  the  health  plan  division  of  UHC,  vendors  were 
dealt  with  individually — within  silos,  to  borrow  a  pop¬ 
ular  IS  term.  But  now,  under  Dougherty’s  new  title  and 
organization,  the  suppliers  are  being  brought  together 
to  explore  what  synergies  might  be  created  to  effect 
change  throughout  UHC.  “I’ve  seen  people  fail  when 
they’ve  tried  to  manage  [strategic]  vendor  relationships 
like  they  would  a  total  procurement  deal,”  Dougherty 
says.  “These  can  be  partnerships,  and  we’ve  proven  them 
to  be  win-win  relationships.  But  we’ve  got  to  treat  [the 
vendors]  the  way  we  want  to  be  treated.” 

Dearly  Beloved 

Just  as  the  new  breed  of  vendors  requires  a  new  mind¬ 
set,  so  does  it  require  a  new  set  of  metrics.  “There’s  a  dif¬ 
ference  between  contracting  for  a  service  as  opposed  to 
a  product  or  a  project  where  there’s  a  definite  beginning 
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and  end,”  says  Peter  Bendor-Samuel,  president  of  Everest 
Software  Corp.,  a  Dallas-based  outsourcing  consultant 
and  service  provider  that  educates  its  clients  in  measur¬ 
ing  outsourcer  performance.  “If  I’m  buying  a  piece  of 
equipment,  then  I  pretty  much  can  tell  what  I’ve  got.  But 
with  service,  it  can  be  good  one  day  and  bad  the  next. 
Where’s  the  recourse?” 

The  trick,  Bendor-Samuel  says,  is  for  customers  to  be 
explicit  upfront  in  their  description  of  the  services  they 
intend  to  buy  and  then  tie  price  to  performance  in  a  set 
of  metrics  that  provide  day-to-day  accountability  for  ser¬ 
vice  delivery.  In  the  end,  price  is  paramount:  Are  you  get¬ 
ting  the  service  and  value  you’ve  paid  for?  But  day-to¬ 


Four  Faces  of  Vendor  Relationships 


WITH  COMPANIES  INCREASINGLY  DEPENDENT  upon  hosts  of  strategic  suppliers, 

"relationship  management  is  probably  the  single  most  important  skill  that  has  to 
be  improved  in  the  IT  field,"  says  Kevin  M.  Campbell,  resources  industries  global 
managing  partner  in  Andersen  Consulting's  business  process  management  practice.  And  the 
key  to  success,  Campbell  says,  is  for  companies  to  recognize  what  kind  of  vendor  relationship 
they  want.  Campbell  identifies  four  models: 


suring  the  success  of  vendor  relationships  at  Ryder 
Integrated  Logistics  Inc.,  a  business  unit  of  Ryder  System 
Inc.,  the  Miami-based  transportation  company.  Most  of 
Ryder  System’s  IT  operations  have  been  outsourced  to 
Andersen  and  IBM  Corp.  as  part  of  a  10-year,  $1.4  bil¬ 
lion  deal,  and  Andersen  is  supporting  Ryder  Integrated 
Logistics’  sales  strategy  in  the  integrated  logistics  supply 
chain  marketplace,  but  the  company’s  IS  management 
still  has  a  wide  range  of  other  vendor  relationships  to 
manage.  In  all,  Ryder  uses  20  to  30  individual  metrics  to 
track  vendors’  performances,  says  Raymond  B.  Greer, 
who  was  Ryder  Integrated  Logistics’  senior  vice  presi¬ 
dent  of  information  and  logistics  services  until  a  recent 

promotion  to  senior  vice  president 
and  general  manager  of  global 
operations.  Beyond  the  pure  finan¬ 
cial  measurements — whether  the 
vendors  are  performing  their  ser¬ 


Traditional:  A  basic  commodity-for-cash  transaction 

Teaming  partners:  A  project-oriented  relationship,  a  la  contracting  with  SAP  AG  to  oversee 
implementation  of  its  complex  software  application 

Long-term  alliances:  Traditional  outsourcing,  wherein  vendors  enter  multiyear  deals  to 
supply  and  manage  select  IT  functions 

Networked  companies:  Long-term,  broad-scoped  alliances  wherein  participants  try  to 


pool  their  individual  strengths  to  attain  common,  global  business  goals 


day  managers  can  check  a  relationship’s  vital  signs  by 
reviewing  whether  vendors  are  meeting  their  contractual 
service  levels,  response  times  and  customer  satisfaction 
standards.  That  doesn’t  mean  CIOs  should  grab  a  clip¬ 
board  and  a  stopwatch  and  follow  their  vendors  to  make 
sure  they’re  behaving.  Instead,  Bendor-Samuel  says,  man¬ 
agers  should  collect  this  data  from  databases,  end  users 
and  customers  and  share  the  information  at  least 
monthly  with  vendors.  At  UHC,  for  example,  the  ven¬ 
dor  management  staff  and  UHC  operations  staff  run 
weekly  reports  tracking  internal  customers’  service 
requests  versus  the  vendors’  response  times.  This  infor¬ 
mation  is  shared  among  UHC’s  and  the  suppliers’  ser¬ 
vice  delivery  team,  who  use  the  data  to  correct  prob¬ 
lems.  If  changes  are  necessary — if  customer  demand  is 
such  that  UHC  needs  more  or  less  service  from  its  sup¬ 
pliers — then  these  changes  and  new  service  levels  are 
agreed  upon  at  the  weekly  vendor  management  meet¬ 
ings.  And  yes,  the  vendor’s  ability  to  accommodate 
change  is  another  viable  metric. 

A  balanced  score-card  approach  is  the  key  to  mea¬ 


-T.  Field 


vices  within  the  agreed-upon  finan¬ 
cial  terms — Greer’s  group  looks  at 
individual  IS  projects  (whether  they 
are  on  time  and  on  budget),  as  well 
as  service-level  agreements  and  cus¬ 
tomer  satisfaction  data.  Ryder  even 
tracks  the  relative  job  experience 
and  performance  levels  of  vendor 
personnel  assigned  to  the  account — 
a  means  of  gauging  whether  Ryder 
is  getting  the  top-performing,  sea¬ 
soned  veterans  it  demanded  in  its 
contracts.  All  of  this  feedback  is 
reported  monthly,  then  shared  with 
Ryder’s  and  the  vendors’  executives 
throughout  the  management  chain. 
“This  approach  has  probably  been  the  key  facilitator  to 
make  sure  we  keep  [vendor  management]  in  balance,” 
Greer  says. 

Of  course,  well-applied  metrics  don’t  show  just  when 
a  vendor  relationship  is  going  right.  At  Southern  New 
England  Telecommunications  (SNET)  in  New  Haven, 
Conn.,  routine  performance  measures  told  Vice  President 
and  CIO  Dick  LeLave  when  he’d  dialed  a  wrong  num¬ 
ber.  The  vendor  (which  will  remain  nameless)  had  signed 
a  five-year  deal,  beginning  in  1997,  to  manage  SNET’s 
desktop  PC  procurement  and  support.  But  within 
months  of  signing  the  contract,  LeFave  could  see  trou¬ 
ble:  Service  levels  and  customer  satisfaction  were  well 
below  expectations.  Investigating  the  cause  of  the  prob¬ 
lems,  LeFave  learned  that  the  vendor  simply  wasn’t  able 
to  supply  the  staff  and  equipment  investment  it  had 
agreed  to  provide.  Within  nine  months  of  first  entering 
this  agreement,  SNET  opted  to  pay  the  penalty  for  with¬ 
drawing  and  reassigned  the  work  in-house.  “We  tried 
working  it  out,”  LeFave  says,  “but  at  the  end  of  the  day, 
if  [the  vendor]  can’t  maintain  the  terms  of  the  contract, 
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then  you’ve  got  to  pull  the  trigger.”  (For  more  on  getting 
out  of  bad  vendor  relationships,  see  “Breaking  Up  Is 
Hard  to  Do,”  on  Page  52.) 

The  Honeymoon  Is  Over 

LeFave’s  experience  with  the  PC  vendor  is  not  unusual. 
Typically,  when  a  company  is  involved  in  a  high-level 
vendor  relationship,  some  of  the  biggest  challenges  fol¬ 
low  directly  behind  the  “I  do’s.” 

At  SNET,  some  of  LeFave’s  biggest  headaches 
appeared  right  after  he  outsourced  data  center  opera¬ 
tions  to  CSC  in  a  seven-year,  $300  million  deal  begin¬ 
ning  in  1997.  “That  first  year  was  tough,”  LeFave  says. 
“We  had  to  work  on  issues  that  we  just  hadn’t  antici¬ 
pated.”  Namely,  SNET’s  own  inventory  of  systems  and 
software  licenses  was  less  than  what  CSC  executives 
expected  and  subsequently  discovered  when  they  took 
charge,  so  new  service-level  agreements  had  to  be  drafted. 
And  then  there  were  the 


all  felt  they’d  become  lawyers,  so  they  were  going  around 
interpreting  contracts  and  deciding  how  they  should  deal 
with  one  another.”  The  solution?  “Big-time  communi¬ 
cation,”  Dougherty  says.  From  his  management  team  he 
appointed  one  person  to  full-time  change-management 
duties,  and  he  initiated  a  campaign  to  shift  people’s  focus 
from  specific  vendor  performance  to  companywide  pro¬ 
cesses — to  think  globally  and  not  act  locally.  As  a  result 
of  his  efforts,  Dougherty  was  able  to  lead  his  staff  out  of 
the  initial  unease  and  help  lead  the  company  in  breaking 
down  the  vendor  management  silos  and  integrating  the 
suppliers  better  in  UHC’s  strategic  planning. 

Vendor  relationships  often  undergo  what  Bendor- 
Samuel  calls  “the  two-year  itch.”  That  is  when  initial 
assumptions  about  the  relationship  start  to  fall  apart 
either  because  of  missed  performance  objectives  or 
because  of  changes  to  the  customer’s  or  vendor’s  busi¬ 
ness.  To  get  over  this  hump,  Bendor-Samuel  says,  the  cus- 


normal  questions  of  inter¬ 
pretation:  Who  covers 
what  according  to  the 
contract?  “Team-building 
was  very  important  after 
the  negotiations  ended,” 
LeFave  says.  “But  that’s 
where  CSC  stood  up  and 
took  charge.”  In  other 
words,  rather  than  run 
from  these  contentious 
issues,  CSC  executives 
pushed  for  clarity  and 
worked  with  SNET  to 
overcome  the  conflicts. 
Ultimately,  the  two  com¬ 
panies  were  able  to 
resolve  the  nagging  ques¬ 
tions  and  establish  the 
foundation  for  an  excellent 
customer-vendor  rapport. 
“We  talk  about  issues  as 
they  come  up,”  LeFave 
says.  “[CSC  executives] 
are  not  a  vendor  to  me; 
they’re  pretty  much  part  of 
the  company.” 

After  United  Healthcare 
outsourced  a  portion  of  its 
data  center  operations  to 
Unisys  in  1996,  Dougherty 
was  surprised  to  find  him¬ 
self  managing  a  bunch  of 
armchair  attorneys.  “The 
new  Unisys  employees 
and  our  own  employees 


United  HealtbCare’s  Tom  Dougherty  expects  vendors  to  bring  answers  to  the  table. 
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tomer  should  take  a  close  look  at  what  is  driving  the  rela¬ 
tionship.  Both  parties  should  then  sit  down  together,  dis¬ 
cuss  what’s  wrong  and  plot  a  corrected  course — renew 
the  vows,  so  to  speak.  After  that  the  customer  should 
add  new  metrics,  such  as  measuring  business  contribu¬ 
tion.  “Normally  what  comes  out  of  these  [midcourse  cor¬ 
rections]  is  a  new  commitment  to  measure  price,  perfor¬ 
mance  and  value,”  Bendor-Samuel  says.  “If  you  do  these 
things  right,  you’ll  get  good  value;  if  you  don’t,  you’ll  get 
rid  of  the  vendor.” 

One  of  the  greatest  threats  to  good  vendor  relation¬ 
ships  can  be  the  contract  itself.  If  either  party  needs  to 
keep  referring  to  the  pact  to  see  if  the  other  is  fulfilling 
its  obligations,  then  communication  has  broken  down. 
“Vendor  management  doesn’t  take  looking  at  a  piece  of 
paper,”  says  Allergan’s  Winston.  “We  know  from  our 
customers  how  our  vendors  are  performing.” 

At  UHC,  Dougherty  says,  “We  have  a  joke:  The  first 
person  who  reads  the  contract  gets  fired.  Of  course,  we’re 
guilty  of  reading  it;  they’re  guilty  of  reading  it.”  But  the 
point  is  that  no  party  is  a  slave  to  the  fine  print.  “We 


SNET’s  CIO,  Dick  LeFave,  realized  bis  vendor  had  the  wrong  number. 


emphasize  that  we  don’t  want  to  constantly  review  the 
contract — you  can’t  change  everything,”  Dougherty  says 
“But  if  we  as  a  business  decide  to  do  A  and  the  contract 
says  B,  we  change  the  contract  and  do  A.” 


Bundles  of  Joy 

The  sign  of  a  really  successful  vendor  relationship  is 
not  just  that  the  customer  gets  what  it  wants  but  that 
it  also  gets  what  it  doesn’t  know  it  wants.  Among  some 
of  the  bonus  benefits  good  vendor  relationships  can 
deliver: 

■  Advice.  When  Allergan  wanted  to  buy  a  new  data  stor¬ 
age  system  from  one  vendor,  Winston  shared  the  prospec¬ 
tive  purchase  agreement  with  several  leasing  companies 
that  had  submitted  bids  on  the  lease  of  the  system.  The 
feedback  from  two  of  these  companies  was  that  Winston 
was  about  to  pay  too  much  and  could  get  a  better  price. 
Allergan  then  renegotiated  the  purchase  agreement  with 
its  prospective  vendor  for  a  substantial  savings.  “We’ve 
seen  a  certain  amount  of  checks  and  balances  like  that 
from  our  vendors,”  Winston  says. 

■  Attraction.  Since  Ryder  signed  on  with 
Andersen,  Greer  finds  the  vendor  is  able  to  back¬ 
fill  open  jobs  far  better  than  Ryder’s  own  peo¬ 
ple  could.  “Ryder  could  never  duplicate  the  level 
of  effort  and  investment  Andersen  is  putting  into 
recruiting  and  training  people,”  Greer  says. 

■  Expertise.  When  DuPont  recently  started  inves¬ 
tigating  whether  to  start  a  shared-services  orga¬ 
nization,  both  CSC  and  Andersen  were  quick  to 
offer  not  just  their  knowledge  but  also  case  stud¬ 
ies  of  other  businesses  that  had  considered  or 
used  shared  services.  “They  bring  solutions  and 
answers  to  questions  we  haven’t  even  asked,” 
Ridout  marvels.  “I  didn’t  anticipate  that  when 
I  did  this  deal.” 

When  asked  what  unexpected  benefits  have 
come  from  his  strategic  vendor  relationships, 
SNET’s  LeFave  pauses  and  thinks  aloud.  Service 
levels  are  better  than  expected;  business  changes 
have  been  handled  efficiently....  Finally,  it  hits 
him:  LeFave  recently  toured  another  company’s 
data  center,  and  he  was  shocked  by  what  he  saw. 
“Where  our  focus  [at  SNET]  is  on  what  goes  on 
in  the  business,  how  to  get  new  products  to  mar¬ 
ket,  at  this  facility  the  discussion  was  all  about 
how  this  is  the  latest  and  greatest  box,  the 
newest  application,”  LeFave  says.  “Now,  I  grew 
up  in  the  data  center;  I  like  the  equipment.  But 
in  the  business — who  cares?  We’re  not  getting 
paid  to  do  the  next  deal  for  PCs;  we’re  paid  to 
add  value.”  BE! 


Senior  Writer  Tom  Field  can  be  reached  at 
tfield@cio.com. 
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Let’s  hold  the  next  global  meeting  via  our  Intranet.’ 


That  means  voice,  data,  even  video. 


(On  2,300  desktops  in  90  days.) 


^  Can  you  do  the  impossible  again? 


Can  your  network? 


More  connected! 


LCorh  and  the  3Com  logo  are  registered  trademarks  and  More  Connected  is  a  trademark  of  the  3Com  Co 


speaks;  the  CIO  cringes. 


3Com  builds  networks  powerful  enough  to  handle  even  the  most  daunting  request.  Intelligent  networks  that 
close  the  gap  between  time  and  distance.  So  that  bandwidth-demanding  applications  —  such  as  remote 
training  and  video-to-the-desktop  —  run  smoothly.  All  from  the  company  that’s  connected  more  businesses  in 
more  ways  than  any  other.  Visit  www.3com.com/moreconnected  for  the  latest  news  about  converged  networks. 
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ROM  THE  VERY  BEGINNING,  CECILIA  CLAUDIO 
saw  signs  pointing  to  the  end.  In  latel 996 
she  had  just  taken  over  as  senior  vice  presi¬ 
dent  and  CIO  of  Anthem  Inc.,  the  Indianapolis-based 
insurance  corporation.  And  the  company  had  just 
completed  the  first  year  of  a  five-year,  $30  million 
data  center  outsourcing  deal  (negotiated  by  her  pre¬ 
decessor)  with  a  big-name  vendor.  But  as  Claudio 
pored  over  the  arrangement’s  first-year  results,  she 
saw  serious  trouble  ahead. 


First  of  all,  invoices  showed  that  from  the  start,  the 
vendor’s  expenses  were  greater  than  what  it  had  cost 
Anthem  to  manage  the  data  center  internally.  Worse, 
thought  Claudio,  Anthem  had  no  staff  assigned  specifi¬ 
cally  to  oversee  this  key  vendor  relationship.  And  the  so- 
called  metrics  of  the  deal  were  so  fuzzy  that  there  weren’t 
even  any  defined  service-level  agreements  (SLAs)  in  effect. 

“All  the  rigor,  discipline  and  formality  you  normally 
find  in  a  contract  did  not  exist,”  Claudio  says — the  fault 
of  Anthem  for  its  outsourcing  inexperience,  she  admits, 
and  of  the  vendor  for  taking  advantage  of  the  rookie.  But 
more  important  than  assigning  blame  were  questions 
about  how  to  proceed.  Could  the  deal  be  renegotiated? 
Could  this  key  vendor  relationship  be  salvaged? 
Ultimately,  the  resounding  answer  was  no.  But  before 
Anthem  pulled  the  plug,  Claudio  followed  the  deal 
through  a  prolonged  dissolution  that  offers  valuable 
insight  to  other  IS  executives  who  may  find  their  own 
vendor  relationships  headed  south. 

Noble  Effort 

Claudio  tried  to  rescue  the  relationship.  After  all,  despite 
the  obvious  problems,  this  was  a  reputable  vendor  that 
Anthem  wanted  to  work  with,  and  the  vendor  did  under¬ 
stand  Anthem’s  business  needs.  Claudio  met  with  the 
vendor’s  senior  executives,  outlined  her  concerns  and 
asked  for  help  structuring  a  new  contract  incorporating 
the  metrics  and  management  structure  she  felt  Anthem 
needed.  “But  the  vendor  [executives]  didn’t  seem  to  take 
us — didn’t  take  me — seriously,”  Claudio  says.  “We  were 
trying  to  make  the  best  of  this  relationship,  but  we 
needed  a  different  level  of  involvement  [in  day-to-day 
operations].” 

Eventually,  the  vendor  did  return  with  a  new  proposal, 


but  Claudio  was  still 
dissatisfied.  The  costs 
remained  too  high, 
and  the  management 
issues  were  unad¬ 
dressed.  Claudio  then 
brought  in  an  out¬ 
side  consultant,  Peter 
Bendor-Samuel,  pres¬ 
ident  of  Everest  Soft¬ 
ware  Corp.,  a  Dallas- 
based  outsourcing 
consultant  and  ser¬ 
vice  provider,  to  help 
determine  the  actual 
cost  of  operating 
Anthem’s  data  cen¬ 
ter.  She  also  showed 
her  ace — the  con¬ 
tract’s  termination  for 
convenience  clause, 
which  meant  Anthem  could  opt  out  of  the  agreement  at 
any  time  (for  a  fee,  of  course)  for  any  reason — without  hav¬ 
ing  to  first  prove  cause.  Unless  a  new,  more  favorable  pact 
was  struck,  Claudio  informed  the  vendor,  Anthem  would 
invoke  the  exit  clause. 

Upon  establishing  the  data  center’s  baseline  cost — far 
below  what  the  current  supplier  was  charging — and  see¬ 
ing  no  real  sense  of  urgency  from  the  vendor,  Claudio 
decided  to  accept  bids  for  the  job  from  other  providers. 
And  although  it’s  fair  to  say  that  the  existing  relationship 
was  in  critical  condition,  the  incumbent  vendor  was  not 
excluded  from  the  RFP  process.  In  fact,  recognizing  the 
advantages  of  partnering  with  a  vendor  that  already 
knew  Anthem’s  systems  and  staff,  Claudio  encouraged 
the  vendor  to  revise  its  approach  and  bid  for  the  job. 
“But  [the  vendor]  continued  to  ignore  a  lot  of  requests,” 
Claudio  says.  Finally,  as  Anthem  winnowed  its  long  list 
of  vendors  to  a  short-list  of  three  finalists,  the  acting  ven¬ 
dor  presented  new  financials  that  were  significantly  lower 
than  the  existing  contract,  yet  still  higher  than  the  other 
two  finalists’  proposals. 

In  the  end,  after  nearly  a  year  of  renegotiation  efforts, 
Anthem  exercised  its  termination  for  convenience  clause. 
The  buyout  cost  Anthem  $3  million,  but  Claudio  figures 
it  was  a  small  price  to  pay  to  get  out  of  a  bad  deal.  And 
the  expense  was  recovered  in  spades  when  Anthem 
entered  its  new  relationship:  a  five-year  deal  with  another 
vendor  that  includes  all  the  management  levels  and  met¬ 
rics  Claudio  wanted — and  for  $100  million  less  over  the 
life  of  the  deal  than  the  original  vendor  charged.  The  new 
contract  went  into  effect  on  Jan.  1  this  year,  and  already 
Claudio  sees  signs  of  a  positive  relationship.  The  new 
vendor  has  a  full-time  account  manager  onsite  at 
Anthem,  and  senior  executives  from  both  companies 
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meet  regularly  to  plot  strategy  and  review  results.  For 
Anthem’s  part,  Claudio  says,  “We  try  to  make  sure  [the 
vendor’s  staff]  recognizes  that  they’re  an  extension  of  us.” 

Lessons  Learned 

Anthem’s  experience  wasn’t  unusual.  As  changes  occur — 
whether  in  business  conditions,  technology  or  manage¬ 
ment — vendor  relationships  frequently  fray,  often  fatally. 
And  the  more  strategic  role  a  vendor  plays  in  a  compa¬ 
ny’s  business,  the  harder  it  is  for  a  company  to  disentan¬ 
gle  itself.  What’s  most  noteworthy  about  Anthem’s  story 


is  the  number  of  good  moves  it  made  in  ending  a  bad 
vendor  relationship. 

The  pre-nup.  You  know  the  old  line  about  “If  you  fail  to 
plan,  you  plan  to  fail.”  It  applies  here.  When  entering  a 
contractual  vendor  relationship,  companies  should  nego¬ 
tiate  an  exit  clause  upfront — preferably  termination  for 
convenience,  as  opposed  to  termination  for  cause.  “It’s 


hard  to  prove  cause,”  says  Bendor-Samuel.  If  the  vendor 
knows  you  can  walk  away  from  the  contract  [without 
proving  cause],  that’s  a  great  driver  to  get  them  back  to 
the  table  to  renegotiate.” 

Know  your  options.  Then  there’s  the  one  about  “The  devil 
you  know  is  better  than  the  one  you  don’t.”  When  possi¬ 
ble,  try  to  work  things  out  with  your  existing  vendor  before 
you  pack  the  suitcase.  Divorce  costs  money,  after  all,  and 
the  acrimony  isn’t  healthy  for  the  reputation  of  either  party. 
Plus,  as  Claudio  recognizes,  there  is  value  in  working  with 
a  vendor  who  already  knows  your  systems  and  staff. 

But  if  you’re  overcome  by  irreconcilable 
differences,  Bendor-Samuel  says,  make 
sure  you  think  through  your  options 
before  you  call  it  quits.  Some  of  the  ques¬ 
tions  to  consider:  Are  you  going  to  termi¬ 
nate  all  of  the  vendor’s  services  or  just 
some?  Will  you  then  take  the  work  to 
another  vendor  or  do  it  all  in-house?  How 
will  your  vendor  react — and  how  will  you 
counter — if  you  announce  your  intent  to 
end  the  relationship? 

Take  your  time.  Anthem  took  nearly  a  year 
to  work  through  its  process  of  ending  one 
vendor  relationship  and  starting  another. 
That  time  line  sounds  right  to  John  Halvey, 
an  outsourcing  specialist  and  attorney  with 
the  New  York  City-based  law  firm  Milbank, 
Tweed,  Hadley  &  McCloy.  “When  people 
get  to  the  point  of  terminating  a  vendor  rela¬ 
tionship,  they  want  to  move  fast,  but  this  is 
where  they’ve  got  to  move  most  slowly,” 
Halvey  says.  Instead  of  running,  not  walk¬ 
ing,  away  from  a  bad  relationship,  execu¬ 
tives  must  answer  the  questions  listed  above, 
weigh  their  options  and  plot  a  new  course 
of  action.  These  decisions,  cloaked  as  they 
may  be  in  the  unpleasantness  of  ending  a 
bad  relationship,  take  time.  To  translate  his 
advice  to  technical  terms,  Halvey  says, 
“There  is  an  inverse  [relationship]  between 
the  speed  at  which  people  want  to  get  [the 
dissolution]  done  and  the  speed  at  which 
they  should  get  it  done.” 

In  the  end,  Halvey  says,  customers  do 
get  the  last  word,  but  they  still  must  respect 
the  power  their  vendors  wield.  “These  peo¬ 
ple  are  the  equivalent  of  airplane  pilots,” 
Halvey  says  of  IT  vendors,  and  he  likens  their  customers 
to  air  travelers  at  the  mercy  of  the  pilot’s  skills.  No  mat¬ 
ter  how  bumpy  the  ride,  he  says,  “The  last  thing  you  want 
to  do  is  shoot  the  pilot  before  he  lands  the  plane.”  BE! 

Senior  Writer  Tom  Field  can  be  reached  via  e-mail  at 
tfield@cio.com. 
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LUCENT  DEFINITY  ECS  The  more  locations  your  company  has,  the  more  challenging  the  question: 

How  can  people  easily  share  information,  ideas  and  resources  at  the  same  time,  even  if  theyre  not  in  the  same 
place?  That’s  why  DEFINITY  ECS  continues  to  evolve.  Not  only  does  it  integrate  voice,  data  and  video,  but  new 
enhancements  allow  your  employees,  as  well  as  vendors,  to  share  and  modify  information  in  real  time.  No 
matter  where  they  are  or  what  network  theyre  using.  This  means 
increased  productivity.  And  bottom  line  results.  Backed  by  Bell  Labs, 

DEFINITY  ECS  gives  you  assured  reliability.  It's  also  flexible  enough 
to  suit  your  needs  now  and  in  the  future.  And,  of  course,  it  s  Year  2000 
compliant.  Plus,  well  be  there  all  along  the  way  to  keep  it  performing 
optimally  for  you.  In  order  to  find  out  more  about  DEFINITY  ECS, 
call  your  local  Lucent  representative  or  1-800-221-1223,  and  ask  for 

extension  353  We  make  the  things  that  make  communications  work: 
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Interview  with  the  Czar 

Seasoned  crisis  manager  John  Koskinen  is 
facing  bis  biggest  challenge  yet:  preparing  tbe 
government  for  Y2K 

BY  SCOTT  KIRSNER 


ian  with  a  fringe  of  gray  hair  and  a 
steely  blue  gaze  that  locks  onto  the  lis¬ 
tener.  Straightforward  and  disciplined, 
he  nonetheless  exhibits  an  easy  sense 
of  humor:  While  at  Palmieri,  he  says, 
he  helped  manage  the  Teamsters  pen¬ 
sion  fund,  which  “made  me  very  big  in 
Las  Vegas  for  a  while.”  After  running 
quickly  through  his  resume,  he  says 
with  a  chuckle,  “It’s  almost  as  if  I  spent 
my  whole  life  planning  for  this  job.” 


HE’S  MANAGING  THE  WORLD’S 
costliest  year  2000  program, 
estimated  by  GartnerGroup 
Inc.  to  hit  as  high  as  $30  bil¬ 
lion  before  it’s  done,  and  he’s 
trying  to  coordinate  the  work  of 
nearly  50  government  agencies.  He’s 
working  to  increase  cooperation 
among  private  sector  businesses  and 


racing  to  get  foreign  countries  to  take 
steps  to  prevent  Y2K  failures. 

Superman?  No,  John  Koskinen, 
chair  of  the  President’s  Council  on  the 
Year  2000  Conversion  and  the  federal 
government’s  so-called  “Y2K  Czar,” 
reporting  directly  to  President  Clinton. 

Even  sans  X-ray  vision,  Koskinen 
has  plenty  of  experience  tackling  what 
look  like  impossible 
challenges.  Over  the 
course  of  his  21-year 
career  as  a  crisis  man¬ 
ager  with  The  Palmieri 
Co.,  based  in  New 
York  City,  which  re¬ 
structures  troubled 
corporations,  Koskinen 
has  worked  under  tight 
financial  deadlines.  He 
helped  reorganize  the 
Penn  Central  Trans¬ 
portation  Co.  when  it 
fell  into  bankruptcy 
and  successfully  resus¬ 
citated  Mutual  Benefit 
Life  Insurance,  the 
largest  failed  life  in¬ 
surance  company  in 
U.S.  history.  Then,  as 
deputy  director  of  the 
Office  of  Management 
and  Budget,  he  helped 
the  federal  govern¬ 
ment  cope  with  the 
1996  shutdown. 

Turning  59  this 
summer,  Koskinen  is  a 
trim,  modest  Kentuck- 


CIO:  When  you  first  agreed  to  accept 
this  job,  how  was  it  defined? 
Koskinen:  The  president  said  that  if  I 
would  accept  the  job,  he’d  define  the 
job  any  way  I  thought  would  work. 
There  was  a  lot  of  pressure  from  Con¬ 
gress,  and  even  from  the  General  Ac¬ 
counting  Office,  that  we  centralize  all 
the  activities  with  the  Y2K  Council  [a 
task  force  that  includes  CIOs  and 
deputy  secretaries  from  more  than  30 
government  agencies]  and  my  office. 
[Congressman]  Stephen  Horn  (see 
“The  Watchdog,”  Page  57)  even  sug¬ 
gested  that  I  get  weekly  reports  from 
everybody  in  government  and  the  pri¬ 
vate  sector,  and  that  I  create  a  lot  of 
public-private  partnerships  in  all  in¬ 
dustries  reporting  to  me. 

The  problem  is,  when  you  start 
thinking  about  how  complicated  the 
economy  of  this  country  is,  not  to 
mention  the  federal  government,  and 
then  you  expand  it  to  the  world,  that’s 
probably  not  an  effective  way  to  get 
ahold  of  everything. 

What  I  came  up  with  as  the  only 
way  to  have  an  impact  in  the  time  that’s 
left  is  to  energize  as  many  umbrella 
groups  as  I  can,  both  at  the  federal 
level  and  in  private  industry.  I’ve  vis¬ 
ited  42  federal  agencies  so  far,  and  I’ve 
been  working  with  organizations  like 
the  United  Nations,  the  World  Bank 
and  the  International  Monetary  Fund. 
For  example,  we’re  collaborating  with 
the  UN’s  Informatics  Working  Group, 
headed  by  Ambassador  Kamal  from 
Pakistan,  to  draft  a  resolution  on 
Y2K,  detailing  how  the  problem 


56  CIO  •  SECTION  1  /  AUGUST  1,  1998 


http://www.cio.com 


CORNER  IMAGE  BY  CARL  TREMBLAY;  OFFICIAL  WHITE  HOUSE  PHOTOGRAPH  (BOTTOM) 


could  affect  the  member  nations  and 
what  they  can  do  to  address  it. 

The  work  isn’t  going  to  get  done  in 
Washington  by  the  Year  2000  Council. 
It’s  going  to  get  done  by  people  at  the 
front  lines.  So  our  strategy  is  to  keep 
reaching  out  to  as  many  organizations 
as  we  can  and  energizing  them  to  take 
responsibility. 

CIO:  What  about  your  plan  of  attack  for 
the  U.S.  government? 

JK:  I’ve  made  clear  to  the  agencies  that  I 
don’t  propose  that  the  Year  2000  Coun¬ 
cil  superimpose  itself  on  that  process  or 
duplicate  it.  Our  goal  is  to  monitor 
them,  to  see  if  they  have  critical  systems 
that  won’t  be  fixed  in  time. 

The  agencies  will  reach  out  to  private 
companies  in  their  sectors.  The  Trans¬ 
portation  Department  will  reach  out  to 
everyone  active  in  transportation  at  the 
state  and  local  levels  as  well  as  interna¬ 
tionally.  [The  Department  of]  Health 
and  Human  Services  will  reach  out  to 
hospitals.  We  don’t  want  the  agencies  to 
assume  responsibility  for  things  they 
can’t  control,  but  we  do  want  them  to 
do  whatever  they  can  to  make  sure  peo¬ 
ple  are  focused  on  Y2K  as  a  serious 
problem. 

CIO:  There's  a  rumor  floating  around 
that  every  programmer  working  for  the 
federal  government  is  being  lured  away 
by  tantalizing  offers  from  the  big  sys¬ 
tems  integrators  and  consulting  firms. 
Any  truth  to  that? 

JK:  I’ve  asked  each  of  the  agencies 
about  this.  There  hasn’t  been  a  notice¬ 
able  increase  in  attrition  lately.  There’s 
been  some  modest  increase,  and  I’m 
sure  some  people  got  hired  [by  compa¬ 
nies  in  the  private  sector]  because  they 
got  great  offers.  In  sum,  we’re  monitor¬ 
ing  it.  But  at  this  stage,  there  hasn’t 
been  the  mass  exodus  that  we  were  all 
concerned  about. 

CIO:  Are  there  some  areas  of  Y2K  you 
are  particularly  concerned  about? 

JK:  Local  governments  are  an  area  of 
concern.  Most  states  don’t  have  a  Y2K 
coordinator,  and  they  should  at  this 
stage.  States  regulate  insurance  compa¬ 
nies,  they  regulate  utilities,  they  have 
health  departments — there’s  a  range  of 
important  functions  that  are  supervised 


The  Watchdog 


at  the  state,  not  federal,  level. 

And  the  states  need  to  be  reaching  out 
to  county  and  city  governments.  But  the 
response  so  far,  anecdotally,  is  that  a  lot 
of  counties  and  cities  are  paying  no 
attention  to  this,  as  if  it  doesn’t  affect 
them.  Then  you  ask,  Well,  how  do  you 
collect  your  taxes,  and  how  are  your 
traffic  lights  coordinated?  What  makes 
you  think  those  things  will  work? 
Sacramento  County  got  very  interested 
in  Y2K  all  of  a  sudden  when  it  discov¬ 
ered  that  on  Jan.  1,  2000,  all  of  the 
doors  at  Folsom  Prison  will 
default  to  open — not  closed. 

I’m  also  concerned  with 
Y2K  internationally,  where 
probably  75  percent  of  the 
countries  have  done  nothing 
about  the  problem  yet.  We 
live  in  a  global,  intercon¬ 
nected  economy.  We  all  have 
a  great  stake  in  ensuring  that 
there’s  as  little  disruption  to 
services  around  the  world  as 
possible. 


There's  a  cobol  programmer 
in  Congress  who  will  be  keep¬ 
ing  an  eagle  eye  on  John 
Koskinen  and  his  Year  2000  Council. 

The  hacker  in  the  House  is  Rep. 
Stephen  Horn,  a  California  Republi¬ 
can  who  has  been  sounding  the 
alarm  on  government  Y2K  issues 
since  early  1996.  Horn,  who  learned 
his  coding  while  a  senior  fellow  at 
the  Brookings  Institution  in  Wash¬ 
ington,  D.C.,  is 
happy  that  the 
president  has  put 
Koskinen  in 
charge  but  has 
no  plans  to  stop 
issuing  regular 
report  cards  on 
the  government's 
Y2K  progress. 
Most  recently, 
his  subcommittee  has  estimated  that 


CIO:  What's  your  advice  to  CIOs  on  deal¬ 
ing  with  Y2K? 

JK:  My  advice  to  CIOs  is  advice  that  I 
hope  most  of  them  have  heard  already: 
No  company  is  an  island  unto  itself.  Ev¬ 
ery  company  has  a  need  to  make  sure  its 
suppliers,  vendors,  service  providers  and 
banks  are  all  going  to  be  able  to  func¬ 
tion.  The  Small  Business  Association  is 
telling  small  businesses  that  if  their 
banks  and  suppliers  can’t  certify  that 
they’ll  be  compliant,  they  should  go  find 
new  banks  and  new  suppliers.  There’s 
still  time  to  do  that. 

CIO:  How  does  that  advice  transfer  to 
companies  thinking  about  their  inter¬ 
faces  with  the  government?  You  can't 
just  go  find  another  government  agency 
to  work  with,  after  all. 

JK:  You  have  to  look  at  your  interfaces 
with  the  government,  sure.  But  I  think 
the  paramount  issue  for  CIOs  in  the  pri¬ 
vate  sector  is  making  sure  they  won’t  be 
severely  impacted  by  other  companies 
in  the  private  sector. 

If  I  were  a  CIO,  I’d  talk  to  the  local 
power  company  and  telephone  com¬ 
pany,  and  I’d  talk  to  the  local  public  ser¬ 
vice  commission.  I’d  ask,  How  satisfied 
are  you  that  we’re  not  going  to  have  a 


only  55  to  62  percent  of  the  govern¬ 
ment's  8,000  mission-critical  systems 
will  be  compliant  by  2000.  He  wor¬ 
ries  about  how  the  Department  of 
Defense  is  handling  the  600,000 
embedded  chips  under  its  control. 
"They're  decentralizing  that  to  the 
base  commanders,"  Horn  complains. 
"How  much  does  a  base  commander 
know  about  finding  embedded 
chips?"  And  he's  concerned  that  the 
current  plans  crowd  too  much  fixing 
and  testing  into  1999. 

Horn  also  frets  about  agencies 
buying  noncompliant  systems,  agen¬ 
cies  reclassifying  critical  systems  as 
noncritical  to  foster  the  illusion  of 
progress,  and  problems  with  the 
country's  power  and  telecommuni¬ 
cations  infrastructure. 

"We  need  a  sense  of  urgency 
about  this,"  says  Horn.  "It's  like 
when  Kennedy  promised  we'd  go  to 
the  moon — there  was  a  clear  target, 
and  everybody  got  out  of  the  way. 
We  need  that  level  of  cooperation 
on  Y2K."  -S.  Kirsner 
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local  telephone  or  power  outage?  You 
need  contingency  plans  for  your  own 
failures  and  for  the  failures  of  others. 

CIO:  I  should  be  thinking  about  whether 
there  are  local  and  state  government 
people  responsible  for  Y2K,  so  if  my 
warehouse  catches  fire  on  Jan.  1,  the 
fire  department  will  come? 

JK:  Exactly.  I’d  start  calling.  Especially  if  I 
were  a  big  company  and  I  felt  someone 
would  listen.  I’d  ask,  What  are  you  doing 
to  make  sure  that  the  transportation  sys¬ 
tems  will  work — that  the  subways  will 
run,  and  the  traffic  lights  will  be  opera¬ 
tional?  I’d  want  to  make  sure  that  A,  I’d 
checked,  and  B,  I  believed  people  when 
they  told  me  [everything  is  under  control] . 
Everybody  says  they’re  doing  fine.  You’re 
going  to  need  to  keep  monitoring  that  and 
pushing  on  it. 

CIO:  What  do  you  do  when  you're  talk¬ 
ing  with  people  at  different  agencies  in 
Washington  to  make  sure  that  they're 
not  just  giving  you  the  answer  that  they 
thinkyou  want  to  hear? 

JK:I’  m  encouraging  people  at  the  top  of 
the  agencies  to  keep  probing.  You  have 
to  overcome  the  great  disincentive  to 
candor.  In  the  private  sector,  the  SEC 
has  required  disclosure,  which  is  impor¬ 
tant,  but  companies  aren’t  anxious  to 
say  they  could  be  in  deep  trouble  and  go 
out  of  business,  and  watch  their  stock 
fall.  In  any  large  organization,  nobody 
wants  to  go  to  the  CEO  and  say,  Our 
part  of  the  enterprise  isn’t  doing  so  well, 
and  we  could  sink  this  operation.  It’s 
important  to  establish  an  atmosphere 
where  somebody  can 
say,  “We’re  going  to 
have  a  problem.”  Any¬ 
body  can  build  a  con¬ 
tingency  plan  around  a 
problem  they  know 
about  in  advance.  It’s 
harder  to  do  that  at  the 
last  minute. 

CIO:  What  flags  does  it  raise  when  an 
agency  tells  you  that  it  won't  have  all  its 
mission-critical  systems  fixed  in  time? 

JK:  As  we  move  forward,  there  will  be  a 
lot  of  private  companies  and  public  or¬ 
ganizations  that  discover  they’re  out  of 
time.  My  advice  is  to  figure  out  where 
the  problems  will  arise  so  you  can  de¬ 


velop  appropriate  contingency  plans. 

Everybody  talks  about  the  FAA. 
There  will  not  be  a  safety  problem 
[because  of  Y2KJ.  FAA’s  contingency 
plan  is  a  backup  system  that’s  already 
compliant.  The  problem  is,  it  causes 
planes  to  be  spaced  substantially  farther 
apart — like  on  a  bad  weather  day.  There 
would  be  more  delays  or  fewer  flights. 
But  what  we’re  trying  to  do  is  maximize 
the  chances  of  the  FAA’s  critical  systems 
being  fixed.  And  it  has  one  of  the  biggest 
challenges  facing  a  federal  agency 
because  of  the  complexity  of  its  systems. 

But  I’m  also  satisfied  that  the  secre¬ 
tary  of  transportation,  the  deputy  sec¬ 
retary  and  the  FAA  administrator  are 
focused  on  this  as  their  number-one  pri¬ 
ority.  If  I  could  get  that  kind  of  focus  in 
every  company  and  governmental 
entity  in  this  country,  we’d  be  in  pretty 
good  shape. 

CIO:  What  do  you  see  as  the  biggest 
challenges  of  your  position? 

JK:Not  getting  lost  in  the  details.  I  have 
people  who  want  to  meet  with  me  from 
individual  states,  and  if  I  start  doing 
that  for  all  50 1  won’t  have  time  for  any¬ 
thing  else.  You  don’t  want  to  start  re¬ 
tailing — as  opposed  to  wholesaling — 
the  problem.  My  job  is  to  put  the  pieces 
together  in  a  fairly  global  way.  If  I  get  an 
indication  of  a  problem  in  a  country  or 
in  a  sector  of  the  economy,  I  have  to  as¬ 
sume  that  it  might  be  a  universal  prob¬ 
lem.  So  the  goal  is  not  to  solve  the  prob¬ 
lem  once.  It’s  to  say,  What  can  we  set  in 
motion  to  make  sure  that  this  problem 
is  solved  across  the  board? 


The  other  challenge  is  not  to  become 
overly  neurotic  about  the  possible  prob¬ 
lems.  You  have  to  keep  a  balance.  I  think 
after  being  a  crisis  manager  for  21  years, 
I  know  how  to  do  that. 

CIO:  How  will  your  role  change  going  in¬ 
to  1999? 

JK:  I’ll  want  to  move  the  Council  from 


getting  people  to  pay  attention  to  trying 
to  monitor  where  the  problems  are  go¬ 
ing  to  be.  That  will  help  us  create  con¬ 
tingency  plans  to  deal  with  systems  fail¬ 
ure.  By  the  middle  of  next  year,  there 
will  be  a  lot  of  reviewing  contingency 
plans.  Then  we’ll  be  into  the  crisis  man¬ 
agement  phase — responding  to  systems 
that  don’t  work.  With  luck,  they’ll  be 
relatively  modest  and  peripheral  in  the 
United  States.  I  can’t  make  that  same 
statement  about  other  countries. 

We’ll  spend  a  lot  of  time  next  year 
carefully  explaining  to  the  public  when 
federal  systems  have  established  they’re 
compliant.  The  public  needs  to  know,  so 
that  the  rumors  of  the  month  won’t 
become  debilitating. 

The  greatest  risk,  in  many  ways,  is 
that  people  will  act  in  anticipation  of 
problems  and  create  economic  disloca¬ 
tions.  I  don’t  think  there  will  be  a  safety 
issue  with  any  flight,  but  if  nobody  flies 
because  they  don’t  want  to  take  the 
chance,  it  becomes  an  economic  debacle 
for  the  airline  industry  and  destination 
resorts  like  the  state  of  Hawaii. 

We  need  to  put  accurate  information 
out  there  so  that  people  can  take  appro¬ 
priate  responses.  The  more  inaccurate 
the  information,  the  greater  the  chance 
for  economic  dislocations. 

CIO:  What's  your  criteria  for  having 
done  a  good  job? 

JK:  My  measure  is,  at  least  from  the 
standpoint  of  the  American  public,  that 
the  disruptions  ought  to  be  only  modest 
inconveniences  to  people.  There  will  be 
control  groups  out  there,  in  the  form  of 
other  countries,  that 
will  have  significantly 
greater  problems  than 
we  do.  So  you’ll  see  the 
impact  of  all  the  work 
we’ve  done,  compared 
with  what’s  been  done 
elsewhere.  Still,  the 
standard  for  us  is  not  to 
be  better  than  anyone  else.  The  real  ques¬ 
tion  is,  Can  people  wake  up  on  Jan.  1, 
2000,  and  function  pretty  much  the  way 
they  always  have?  BE! 


Scott  Kirsner,  a  Boston-based  writer,  is 
working  on  a  series  of  articles  for  CIO 
on  the  Y2K  problem.  He  can  be  reached 
at  kirsner@worldnet.att.net. 


Tm  encouraging  people  at  the  top  of  the 
agencies  to  keep  probing.  You  have  to  overcome 
the  great  disincentive  to  candor." 

-John  Koskinen 
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IVIISSIOIM:  In  Fortune  1000  companies  from  insurance  to  manufacturing,  finance  to  healthcare,  Lockheed 
Martin  has  partnered  with  clients  to  develop  and  deploy  leading-edge  solutions  to  real-world  business  problems. 
And  for  three  decades,  we’ve  achieved  impressive  results. 
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Large-scale  systems  integration.  IT  outsourcing.  Data  warehousing.  Imaging/work  flow 
^ement.  Salesforce  automation.  Technology  reskilling.  E-commerce.  Were  experienced  with  the  kinds 
■  solutions  that  can  make  businesses  like  yours  more  efficient  and  more  competitive.  And  more  successful. 
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A  Game  of  Cat  and  Mouse 


Hackers  may  probe  your  network  defenses , 
but  detection  systems  can  help  find  them 


BY  PETER  RUBER 


The  cold  war  may  be  over,  but  not  all  of  the 
spies  came  in  from  the  cold.  They  bought  com¬ 
puters.  One  might  be  a  mole  in  your  organization, 
stealing  information  assets  for  a  competitor  or 
foreign  government.  Another  could  be  sneaking 
through  your  network  firewall  as  you  read  this. 

These  aren’t  scenarios  for  late-night  movies  or  best¬ 
selling  spy  thrillers.  They’re  everyday  occurrences  in  the 
real  world.  Last  March  someone  broke  in  to  NASA’s  net¬ 
work  and  crashed  8,000  computers. 

Incidents  like  these  underscore  the  mounting  concern 
CIOs  have  over  the  safety  of  the  intellectual  assets  stored 
on  their  networks.  Security  experts  say  the  number  of 
incidents  reported  in  the  press  are  only  the  tip  of  the  ice¬ 
berg.  The  biggest  threat,  as  much  as  80  percent  of  all 
intrusions,  comes  from  disgruntled  employees  who  plant 
time  bombs  that  explode  after  they  leave  or  steal  propri¬ 
etary  information  before  joining  a  competitor. 

Such  digital  burglaries  can  often  go  undetected  for 
months  or  years,  like  the  recently  publicized  case  of  the 
high-ranking  General  Motors  executive  who  copied  an 
estimated  40,000  documents  and  took  them  with  him  to 
Volkswagen.  However,  you  can  stop  the  tigers  at  your 
network  gates  and  identify  the  trail  of  in-house  burglars — 
if  you  have  intrusion  detection  systems  on  your  network. 


Internet  Vulnerability 

Up  until  the  last  year  or  two,  network  intrusion  detection 
systems  were  used  primarily  by  select  government  agen¬ 
cies,  the  military,  aerospace  contrac¬ 
tors  and  biomedical  and  financial 
companies.  They  were  both  expen¬ 
sive  and  difficult  to  maintain.  And 
while  they  were  high  on  CIO  shop¬ 
ping  lists,  the  finance  folks  considered 
such  systems  an  extravagance. 

That  attitude  is  rapidly  changing. 
With  the  arrival  of  less  expensive  off- 
the-shelf  solutions,  senior  manage¬ 
ment  is  loosening  the  purse  strings, 
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says  Jim  Hurley,  an  industry  analyst  with  Boston-based 
Aberdeen  Group  Inc.  He  estimates  conservatively  that 
the  market  for  intrusion  detection  systems  will  double 
from  $50  million  in  1997  to  $100  million  in  1998. 
Others  predict  the  market  could  soar  to  a  half-billion 
dollars  by  2002. 

Organizations  that  conduct  Internet  commerce  or  pro¬ 
vide  extranet  access  to  business  partners  and  remote 
employees  are  at  the  top  of  the  risk  ladder,  says  an  April 
14, 1998,  report  released  by  the  International  Computer 
Security  Association  (ICSA)  in  Carlisle,  Pa.  The  report 
reveals  that  over  the  last  year,  93  percent  of  200  Web- 
connected  small  businesses,  Fortune  500  companies  and 
federal  agencies  surveyed  had  security  flaws  that  left  them 
vulnerable  “to  even  the  most  rudimentary  malicious 
attacks” — in  spite  of  the  fact  that  all  had  firewalls  at  their 
network  perimeters  and  good  security  policies  in  place. 


62  CIO  •  SECTION  1  /  AUGUST  1,  1998 


http://www.cio.com 


ILLUSTRATIONS  BY  JAMES  KACZMAN 


Gotcha! 

“Intrusion  detection  systems  won’t  stop 
determined  hackers  from  tunneling 
through  your  firewalls,  but  they  can  alert 
you  that  suspicious  activity  is  taking 
place,  ”  says  William  Boni,  a  Los  Angeles- 
based  intellectual  property  protection 
consultant  for  Coopers  &  Lybrand  LLP. 
That  gives  you  a  chance  to  assess  the 
threat  and  take  appropriate  action. 

Intrusion  detection  systems  generally 
consist  of  hardware  probes  and  software 
that  reside  in  a  networked  PC  just  inside 
a  firewall.  They  scan  incoming  packets 
for  signatures  of  known  attack  programs 
similar  to  the  way  antivirus  programs 
hunt  for  signatures  of  computer  viruses. 
These  systems  can  be  reconfigured  to 
react  in  different  ways  when  they  detect 
suspicious  packets.  They  can  be  set  to 
issue  an  automatic  disconnect,  reconfig¬ 
ure  the  access  rights  inside  the  router 
(which  unfortunately  warns  the  intruder 
that  a  security  system  is  on  to  him),  dis¬ 
play  an  alarm  on  the  management  con¬ 
sole  and  send  e-mail  and  pager  alerts. 

“We  use  intrusion  detection  to  tell  us 
when  there  are  violations  to  any  of  our 
standard  security  policies,”  says  Jim 
Patterson,  vice  president  of  security  and 
telecom  for  OppenheimerFunds  Inc.  of 
Englewood,  Colo.,  which  has  $90  billion 
in  investment  assets.  Patterson  runs 
Axent  Technologies  Inc.’s  OmniGuard/ 
Enterprise  Security  Manager  daily  on  all 
of  his  Unix,  NT  and  Novell  platforms.  “It 
tells  us  if  there  were  any  violations  of  any 
of  our  standard  security  policies,”  he  says. 
Axent’s  Intruder  Alert  runs  on  all  servers 
that  have  interfaces  to  the  outside  world. 
Patterson  installed  intrusion  detection 
because  OppenheimerFunds  planned  to 
expand  security  selling  to  3  million  cus¬ 
tomers  over  the  Internet.  “We  knew  that 
could  make  us  a  tempting  target,  and  I 
wanted  to  be  prepared.” 

An  IT  executive  with  a  major  Mid¬ 
western  bank  holding  company,  who 
requested  anonymity,  agrees  with  Patter¬ 
son.  He  admits  to  having  detected  several 
attacks  since  installing  CyberCop  from 
Network  Associates  Inc.  “And  we  expect 
those  to  increase  when  we  implement 
Internet  banking  for  our  customers,”  he 
says.  “When  you  announce  to  you  cus¬ 
tomers  that  they  can  get  access  to  their 


Caution:  Merging 
Developers  Ahead 

What  do  you  do  when  an  acquisition  orphans 
your  application- development  tools ? 


CONSOLIDATION  IS  A  WAY 
of  life  in  technology,  and  we 
joke  about  this  week’s  Cisco 
Systems  acquisition.  But  now  the 
consolidation  is  sidling  closer  to  the 
heart  of  IT — inexorably,  you  can 
see  application-development  tool 


ORPHANED  TOOLS 


vendors  coming  together.  The  trend 
really  started  on  the  outer  edges  of 
radar.  Borland,  struggling  to  rein¬ 
vent  itself,  bought 
Open  Environ 
ment  and 
Visigenic  Soft¬ 
ware,  and 
then  last 
spring  repack¬ 
aged  itself  as 
Inprise  Corp.,  an 
enterprise  tool  vendor. 

Aonix  Inc.  is  the  agglomeration  of 
Interactive  Development 
Environments  and  Thomson 
Software  Products,  with  Teleuse, 
Alsys  and  Must  Software  rolled  in 
for  good  measure.  Rogue  Wave 
Software  Inc.,  a  small  developer 
based  in  Boulder,  Colo.,  has 
acquired  Stingray  Software  and 
Subtle  Software  this  year.  Rational 
Software  Corp.  bought  Pure  Atria 
(itself  a  merger),  Requisite  Technol¬ 
ogy  and  SQA.  It’s  Pac-Man  all  over 
again.  And  it’s  unlikely  that  we’ve 
seen  the  end  of  it. 

That  works  fine  when  the  result¬ 
ing  company  is  chock-full  of  com¬ 
plementary  tools  and  is  offering  an 
integrated  smorgasbord  that  helps 
you  get  programmers  up  to  speed. 
But  what  if  the  tool  your  IS  depart¬ 
ment  loves  is  the  one  that  gets 
shelved?  You’ve  built  applications 
with  a  tool  that  ain’t  going  any¬ 
where.  Vendors  and  analysts  alike 
admit  that  it’s  tough — if  not  impos¬ 


sible — to  pick  the  winning  horse. 

“There  are  always  risks,  espe¬ 
cially  with  software,”  says  Judith 
Hurwitz,  president  and  CEO  of 
Hurwitz  Group  Inc.,  a  consulting 
firm  based  in  Framingham,  Mass. 

“If  products  adhere  to  well-accepted 
standards  and  formats  and  inter¬ 
faces,  they  should  be  on  the  evalua¬ 
tion  list.  If  they  are  one  of  a  kind,  it’s 
either  so  revolutionary  that  it’s 
worth  the  risk,  or  you  should  look  at 
companies  that  are  more  standards- 
oriented.” 

Hurwitz  notes 
advantages  to  the 
former  group. 
She’s  seen  scads 
of  companies 
take  big  risks 
with  revolutionary 
software  tools  and 
reap  phenomenal  payback. 
“But  they  understand  the  downside 
and  they  prepare  their  manage¬ 
ment,”  she  stresses. 

In  a  way,  consolidation  could 
become  an  advantage.  “There’s  a  cri¬ 
sis  of  complexity,”  says  Del  Yocam, 
chairman  and  CEO  of  the  newly 
christened  Inprise.  Yocam  notes  that 
CIOs  feel  burned  by  platform- 
specific  and  proprietary  tools.  “CIOs 
want  simplification,  they  don’t  want 
helter-skelter.  They  don’t  want  to 
hear  about  anything  that  locks  them 
into  a  platform  agenda.” 

The  key  is  flexibility.  Look  for 
open  interfaces  that  will  let  old 
applications  easily  talk  to  new  ones. 
From  a  business  standpoint,  due 
diligence  and  common  sense  go  a 
long  way  in  choosing  an  applica¬ 
tion-development  tool.  Rogue  Wave 
President  and  COO  Michael  Scally 
advises,  “If  the  application  is  mis¬ 
sion-critical  for  you,  make  sure 
the  tool  is  mission-critical  to  the 
vendor.”  -Howard  Baldwin 
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Emerging 

Technology 

accounts  over  the  Internet,  the  hacker  says,  ‘So 
can  I.’” 

Leading  security  experts  recommend  that  you 
not  disconnect  all  attacks  the  moment  they’re 
detected.  See  what  the  intruder  is  up  to,  even  route 
him  to  a  neutral  server  and  capture  all  the  IP 
addresses  attached  to  the  signature  for  possible 
criminal  investigation  by  authorities,  they  suggest. 

That  might  work  for  some  companies,  says  the 
anonymous  banker,  but  he  prefers  to  disconnect 
intruders.  “Attacks  come  in  at  all  hours  of  the  day 
and  night,  and  usually  [don’t  last]  very  long. 
Chances  of  a  console  operator  seeing  an  attack  hap¬ 
pening  are  very  slim.” 

Merger  Mania 

While  incentives  for  beefing  up  network  security 
are  often  compelling,  there  are  several  reasons  why 
shrink-wrap  intrusion  detection  solutions  have  been 
received  cautiously  by  CIOs,  says  Aberdeen’s 
Hurley.  The  industry  is  still  maturing  and  there  are 
too  many  niche  players  targeting  point  solutions. 

Because  development  times  for  network  secur¬ 
ity  products  are  long,  the  industry  has  reached  the 
consolidation  and  merger  phase.  In  February  Cisco 
Systems  Inc.  bought  Wheelgroup  Inc.,  known  for 
its  NetRanger  product  and  a  library  of  intrusion 
signatures,  which  Cisco  can  bundle  with  its  firewall 
technology.  That  same  month,  Network  Associates 
bought  Trusted  Information  Systems  Inc.,  which  in 
October  purchased  Haystack  Labs  Inc.,  maker  of 
the  WebStalker  product.  Once  these  products  are 
integrated  with  CyberCop,  McAfee  Associates 
Inc.’s  antivirus  products,  Cisco’s  Centri  Firewall 
and  Network  General’s  Sniffer  products,  the  com¬ 
pany  will  have  the  foundation  of  an  enterprise 
security  suite. 

The  remaining  independents  are  Internet  Security 
Systems  Inc.  of  Atlanta,  which  has  the  lion’s  share 
of  the  intrusion  detection  market  (35  percent, 
according  to  an  Aberdeen  survey),  and  newcomer 
Centrax  Corp.,  in  San  Diego,  whose  cofounders 
developed  some  of  the  earliest  intrusion  detection 
systems  for  the  U.S.  government. 

The  result  of  these  consolidations:  Vendors  can 
integrate  a  core  set  of  products  into  an  enter¬ 
prisewide  framework,  similar  to  what  Computer 
Associates  International  Inc.  is  doing  in  the  system 
and  network  administration  arena.  But  don’t  expect 
all  the  products  to  be  alike,  cautions  Hurley. 

“All  have  functional  and  management  weak 
points,”  says  Hurley.  “The  functional  weak  point  is 
that  no  one  supplier  has  a  complete  solution  yet. 
They  all  have  started  from  a  strength.”  That  strength 
may  be  proactive  network  scanning  to  find  weak¬ 
nesses;  it  may  be  reactive  intrusion  to  determine  what 


o 
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Taking  Care  Of  Business 

Has  your  national  sales  manager  ever  screamed 

bloody  murder  because  she  went  in  to  close  a  sale  and  discov¬ 
ered  that  the  client's  previous  purchase  had  been  back-ordered 
for  two  months?  Why  didn't  you,  as  the  official  keeper  of  information, 
warn  her  that  she  was  walking  into  a  powder  keg?  Let's  face  it,  there's 
probably  lots  of  information  on  your  system  that  the  national  sales  man¬ 
ager  doesn't  care  about,  but  the  stuff  she  does  care  about,  she  cares 
about  deeply.  Ditto  the  product  manager,  the  CFO  and  everyone  else  in 
the  company.  They  all  peer  at  the  company  through  one  window,  and 
while  it  may  be  a  narrow  window,  it's  crucial  to  them. 

Delivering  the  right  information  to  the  right  people  at  the  right  time  is 
the  logic  behind  BroadQuest  Inc.'s  eponymous  BroadQuest  interaction 
software.  Using  your  company's  intranet,  it  links  to  ERP  and  customer-ser¬ 
vice  applications  so  that  users  can  monitor  what  goes  on  with  what  inter¬ 
ests  them.  In  a  straightforward  way  (translation:  without  a  lot  of  pro¬ 
gramming  necessary),  it  notifies  users  not  just  when  a  product  is 
back-ordered,  but  when  another  order  is  requested  for  said  back-ordered 
product.  If  the  help  desk  discovers  a  fix  for  the  new  custom  application, 
its  availability  should  be  broadcast  to  everyone  who  has  the  application, 
not  just  those  who've  reported  it. 

Besides  the  BroadQuest  Console,  which  runs  in  the  Web  browser,  the 
application  also  incorporates  BroadQuest  Broker,  which  runs  on  a 
Windows  NT  server,  and  the  BroadQuest  Director,  the  administrative  tool 
for  IS  to  create  data  relationships  and  monitor  system  performance. 
BroadQuest  anticipates  departmental  pricing  at  about  $70,000,  based  on 
one  server  ($25,000),  one  broker  ($10,000  to  $20,000)  and  50  users 
(starting  at  $500  per  user).  For  more  information,  contact  408  287-5665 
or  visit  www.broadquest.com. 


The  Laptop  for  Loooong  Trips 

NOW  THAT  LAPTOPS  ARE  GETTING  SO  AMAZINGLY  THIN, 
manufacturers  are  creatively  making  them  thick  again.  We 
approve  of  Micron  Electronics  Inc.'s  plan.  Its  portable  GoBook 
offers  the  traditional  three-hour  battery  life,  but  you  can  also  latch  on  an 
additional  battery  that's  the  same  size  as  the  GoBook  for  an  additional 

hours  of  battery  life.  It's  enough  to  keep  you 
ng  through  all  kinds  of  delays  and  transat- 
ntic  travel.  If  you  don't  need  the  battery 
booster,  don't  pack  it.  But  even  with  the  bat¬ 
tery  pack,  the  GoBook  still  weighs  in  at 
under  7  pounds,  with  dimensions  just 
smidgens  under  12  inches  by  9  inches  by 
2  inches  (without  the  extra  battery  it's 
only  4-1/2  pounds  and  1.3  inches  high). 
The  GoBook  comes  in  two  versions:  a  233MHz 
version  for  $2,999  and  a  266MHz  version  for  $3,299.  Both  incorporate 
32MB  of  RAM,  a  2.1GB  hard  drive,  floppy  drive  and  CD-ROM  drive.  The 
port  replicator  costs  an  additional  $199.  For  more  information,  contact 
208  898-3434  or  visit  www.micronpc.com. 
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Project  Management  Service 


DO  YOU  SOMETIMES  FEEL  LIKE  BEING  A  CIO  REQUIRES  THE 

combined  organizational  skills  of  everyone  who  planned  D-day? 
Project  management  is  one  of  the  top  priorities  of  your  peers,  yet 
getting  and  staying  organized  is  a  full-time  job  in  itself.  In  response  to  the 
pressures  of  both  ongoing  projects  and  now  the  Y2K  bugaboo,  Burlington, 
Mass.-based  Software  Productivity  Research  has  developed  Plan  Ahead,  a 
multiyear  software  planning  service  for  CIOs  and  corporate  developers.  An 
SPR  team  comes  in  to  help  you  turn  the  next  24  to  36  months  into  a  care¬ 
fully  planned  schedule  of  milestones  and  deliverables. 

It's  a  six-step  process.  Step  one  involves  project  selection,  determining 
from  as  many  as  50  projects  what's  most  important.  Step  two  calculates 
the  costs  and  benefits  of  each  project  so  that  resources  can  be  allocated 
properly  (at  this  stage,  SPR  uses  a  proprietary  planning  tool  called  SPR 
KnowledgePlan  2.0  that's  been  compiled  from  the  results  of  8,000  previ¬ 
ous  projects).  At  step  three,  the  list  is  winnowed  based  on  business  value, 
while  step  four  involves  a  closer  cost-estimation  study. 

Step  five  incorporates  final  project  selection,  and 
finally,  at  step  six,  the  Plan  Ahead  team 
rolls  out  the  road  map  of  the  effort,  so 
that  the  enterprise  can  properly  track  its 
progress.  Pricing  starts  at  $50,000  and 
depends  on  the  scope  of  the  project.  For 
more  information,  call  781  273-0140  or 
visit  www.spr.com. 


E-Commerce  Chatting 

There  are  several  new  and  efficient  methods  for 

connecting  Web  site  visitors  to  your  call-center  staff  over  the  tele¬ 
phone.  The  customers  click  an  icon  and  voila,  they  can  speak 
through  their  computer  to  a  customer  service  representative.  But  what  if 
you  don't  necessarily  need  voice-to-voice  communication?  What  if  you 
just  want  to  incorporate  old-fashioned  chatting — typing  your  questions 
in  a  window  on  the  screen?  EShare  Technologies  Inc.'s  new  NetAgent 
application  and  software-development  kit  lets  corporate  and  other  Web 
developers  incorporate  live,  interactive  customer  service  into  your  compa¬ 
ny's  Web  page. 

The  customer  clicks  on  the  appropriate  icon  and  can  query  the  customer 
service  representative  in  real-time.  The  rep  in  turn  can  answer  questions, 
download  FAQs  (without  the  customer  having  to  find  them)  or  other  files, 
transmit  tutorials  or  refer  the  customer  to  other  company  Web  pages 
directly  through  the  customer's  Web  browser. 

The  software  consists  of  two  pieces — the  NetAgent  application  that 
runs  on  the  rep's  machine,  and  the  NetAgent  server  software.  There  is 
also  a  software  development  kit  (SDK).  According  to  EShare,  the  applica¬ 
tion  operates  through  firewalls  and  does  not  require  a  plug-in  or  any 
other  downloaded  files.  It  also  supports  either  48-bit  or  128-bit  encryp¬ 
tion.  Pricing  for  the  server  is  $9,995,  plus  $1,495  per  seat  for  each  cus¬ 
tomer  service  rep  or  supervisor.  The  NetAgent  SDK  is  priced  at  $14,995. 
For  more  information,  call  516  864-4700  or  visit  www.eshare.com. 


has  happened.  It  may  even  be  vulnerability  and  risk 
assessment,  which  goes  about  trying  to  collapse  iden¬ 
tified  information  into  some  prioritized  scheme  that 
will  allow  IS  to  improve  security  in  the  network. 

Some  users  express  concern  about  how  individual 
products  will  mesh  with  enterprise  management  archi¬ 
tectures.  They  also  worry  about  the  ease  of  setting  trig¬ 
gers,  parameters  and  thresholds,  and  from  which  van¬ 
tage  point  the  product  will  scan  the  network. 

That  particular  facet  became  a  bone  of  contention 
with  the  anonymous  banker,  who  ran  a  side-by-side 
comparison  of  two  leading  detection  systems. 
“Basically,  both  saw  the  same  stuff,  and  they  recog¬ 
nized  everything  we  threw  at  them.  But,  in  each  case, 
each  saw  something  the  other  didn’t  and  sometimes 
named  them  differently,”  he  says. 

And  while  he  felt  both  products  were  relatively 
equal,  he  rejected  one  because  the  probe  required 
him  to  poke  holes  in  his  own  firewall  in  order  to  view 
incoming  packets.  That  made  him  nervous. 

Finding  the  Culprits 

With  respect  to  preventing  potential  inside  burglar¬ 
ies,  experts  recommend  placing  the  most  valuable 
corporate  information  on  one  or  more  departmen¬ 
tal  servers  with  rigidly  controlled  access  rights,  pos¬ 
sibly  through  an  internal  firewall  layer.  Intrusion 
detection  systems  that  log  event  records  can  then  pro¬ 
vide  information  on  unauthorized  attempts  to  gain 
access  to  those  servers. 

While  network-based  intrusion  detection  systems 
are  good  at  examining  packets  of  misuse,  their  relia¬ 
bility  can  sometimes  be  affected  by  encryption.  It’s  an 
issue  that  the  vendor  community  still  has  to  address. 
Another  eagerly  awaited  enhancement:  a  software 
agent  that  sits  on  every  desktop  PC.  It  would  moni¬ 
tor  which  workstations  access  sensitive  files  and  which 
files  are  copied  (and  when),  providing  the  kind  of  evi¬ 
dence  it  takes  to  put  handcuffs  on  an  industrial  spy. 

Even  so,  intrusion  detection  systems  are  still  just 
one  piece  of  the  security  arsenal.  “You  need  a  com¬ 
prehensive  solution,”  insists  Keith  Bowyer,  network 
infrastructure  manager  for  The  Money  Store  Inc. 
in  West  Sacramento,  Calif.  Bowyer’s  solution 
includes  intrusion  detection  systems;  he  lists  fire¬ 
walls,  strong  authorization  policies,  file  encryption 
and  antivirus  programs.  When  it  comes  to  security 
these  days,  he  laments,  “you  can’t  rely  on  a  single 
solution  like  a  firewall  anymore.” 

Oppenheimer’s  Patterson  concurs,  echoing  the 
importance  of  all  the  items  on  Bowyer’s  list.  Intrusion 
detection  systems,  he  adds,  “are  not  a  silver  bullet, 
but  they  can  add  an  extra  level  of  comfort.”  HO 


Peter  Ruber  is  a  technology  writer  on  Long  Island, 
N.Y.  He  can  be  contacted  at  lbsb20a@prodigy.com. 
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IN  FUTURE  ISSUES 

Special  Issue:  The  CIO-1 00 

More  and  more  companies  view  value  chains  as  the  linchpins  of  competitive 
advantage.  The  1 1th  annual  CIO-100  issue  will  feature  companies  that  excel  in 
managing  the  value  chain,  from  inventory  management  and  product  distribution 
to  electronic  commerce  and  demand  forecasting. 

IS  Staffing  Update 

C/O’s  latest  survey  on  the  IS  staffing  crisis  shows  that  the  staffing  crunch  remains 
tight.  Read  the  survey  results  and  learn  about  the  disconnect  between  IS  depart¬ 
ments’  needs  and  higher  education’s  inability  to  meet  those  needs.  Learn  how  to 
improve  your  relationship  with  colleges  and  universities  to  take  advantage  of  an 
untapped  labor  pool. 


EXECUTIVE  PROGRAMS 

The  Value  of  Enterprise  Information  as  Business  Currency 

Oct.  4-7,  1998  •  Sheraton  San  Diego  Hotel  and  Marina  •  San  Diego 
As  information  becomes  the  new  currency  of  business,  organizations  must  learn 
how  to  break  down  the  barriers  between  traditionally  separate  business  functions 
and  rethink  processes  to  maximize  business  value.  This  conference  will  use  case 
studies,  business  briefings  and  presentations  from  leaders  in  the  business/IT  revolu¬ 
tion  to  help  participants  understand  the  benefits  of  this  strategy  and  learn  how  cer¬ 
tain  companies  have  adapted  to  processes  driven  by  information  and  technology. 
Contact  CIO  at  800  366-0246  or  www.cio.com/conferences. 


CIO  RESEARCH  RESULTS 


1997  CIO  EXECUTIVE  COMPENSATION  SURVEY 

Based  on  the  responses  of  474  IS  executives,  this  survey  looks  at  compensation  as  it  relates 
to  years  of  experience,  budget,  age,  gender,  company  size  and  education. 

PRICE:  $395  Contact  Lisa  Kerber  at  508  935-4449  or  kerber@cio.com 


TECHNOLOGY  DEPLOYMENT  AND  SPENDING  SURVEY 

A  CIO/ Morgan  Stanley,  Dean  Witter  &  Co.  survey  reveals  where  IT  dollars  go  and  which  new 
technologies  are  finding  acceptance. 

PRICE:  $395  Contact  Lisa  Kerber  at  508  935-4449  or  kerber@cio.com 

CIO  CONSULTWARE— OPTIMIZING  HUMAN  RESOURCES: 

BEST  PRACTICES  IN  HIRING,  TRAINING  AND  RETAINING  I.T.  TALENT 

Desperate  times  don't  mean  you  have  to  resort  to  desperate  measures.  Learn  how  leading 
companies  are  recruiting,  developing  and  retaining  IT  staff  successfully.  Visit  www.cio.com/ 
consultware. 


NEW! 


PRICE:  $1,995  Contact  Dot  Caspersen  at  508  935-4040  or  research@cio.com 


Lnt*»  CIO  CONSULTWARE— MASTERING  YOUR  INTRANET/INTERNET: 
POLICIES,  PROCEDURES  &  BEST  PRACTICES 


Learn  how  other  organizations  are  managing,  using  and  deriving  business  value  from 
intranets  and  the  Internet.  Visit  www.cio.com/consultware. 


PRICE:  $1,495  Contact  Dot  Caspersen  at  508  935-4040  or  research@cio.com 


CIO  CONSULTWARE— IMPLEMENTING  I.T.  STRATEGY: 

TRENDS,  PROCEDURES  &  BEST  PRACTICES 

Shorten  the  planning  cycle  and  create  a  process  that  works  for  your  entire  organization. 
PRICE:  $2,295  Contact  Dot  Caspersen  at  508  935-4040  or  research@cio.com 


cio.com 

http://www.cio.com 

The  Research 
Starts  Here 

US® 

Globalization 
Research  Center 

www.cio.com/forums/global 

It's  a  small  world.  ClO.com's 
globalization  research  center 
helps  you  learn  how  to  do 
business  anywhere  in  the  world. 

usu 

IT  Career  Resources 
Research  Center 

www.cio.com/forums/itcareer 

Learn  how  to  use  the 
Web  to  advance  your  career. 

Knowledge 
Management 
Research  Center 

www.cio.com/forums/knowledge 

Learn  practices  for  the  capture, 
analysis,  dissemination  and 
archiving  of  information 
into  knowledge. 


ERP  Research  Center 

www.cio.com/forums/erp 

Learn  how  ERP  helps  integrate 
companywide  information. 


Remote  Computing 
Research  Center 

www.cio.com/forums/remote 

Find  new  strategies  to  make 
telecommuting  easier. 
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hp  3000  trustworthy 


trustworthy  hp 


Comfortable  is  a  word  not  often  associated  with  new  technology.  But  what  if  that  “new”  technology  had 
twenty-five  years  of  experience?  Introducing  the  rebirth  of  the  HP  3000.  The  HP  3000  offers  you  a  highly 
available  and  reliable  platform  for  your  mission-critical  applications.  Contact  us  at  www.hp.com/go/3000servers 
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TERRA  NOW  Express  -  the 
smarter  way  for  your  organization 
to  retrieve  software  directly  from 
the  desktop! 


From  the  cubicles  of  your  corporate 
headquarters  to  your  remote  workforce 
in  the  field,  Terranova  Express  lets  your 
employees  access  applications  over  your 
intranet.  Terranova  Express  also  provides 
complete  software  asset  management, 
promotes  license  compliance  and 
automates  the  installation  of  software  on 
your  employees'  desktops  from  inside 
your  corporate  network. 

If  you're  looking  for  a  better  way  to 
manage  your  desktop  software,  give 
us  a  call. 


Lucent  Technologies 

Bell  Labs  Innovations 


Software  Solutions  Group 
2  Paragon  Way,  Suite  400 
Freehold,  NJ  07728 


htt  „  800-636-0842 

nttp.V/www.lueent.com/'ssg 


General  Motors 
Locomotive 
Group's  Dana 
Deasy  on 
Multivendor 
Outsourcing 

CIO:  What's  so  special 
about  GMLG's  new 
outsourcing  deal? 

In  March,  GMLG  became 
the  first  GM  division  to 
break  the  company’s  long¬ 
standing,  single-provider 
outsourcing  relationship 
with  Electronic  Data 
Systems  Corp.  (EDS),  enter¬ 
ing  into  a  new  multivendor 
arrangement.  The  new  five- 
year  deal,  with  a  base  value 
of  $85  million,  brings  in 
Computer  Sciences  Corp. 
(CSC)  to  run  help-desk  oper¬ 
ations,  application  develop¬ 
ment  and  maintenance,  and 
LANs,  while  EDS  will  con¬ 
tinue  to  manage  WANs  and 
mainframe  computing. 

Can  you  put  the  deal's  sig¬ 
nificance  into  perspective? 

It’s  not  that  the  deal  itself  is 
significant.  What’s  significant 
is  the  process  we’ve  been 
through  and  the  experiences 
that  we  will  be  able  to  share 
with  all  of  the  other  GM 
sectors.  When  we  started 
[creating  the  deal],  there  was 
nothing  to  work  with — no 
process,  no  template,  no 
RFP.  Now,  all  of  what  we’ve 
done  has  been  captured  in  a 
“lessons  learned”  package 
that  will  be  carried  forward 
to  the  other  sectors  as  they 


ucLcmimc  wnai  mey  want  ro 
do  in  the  area  of  resourcing. 


What  do  you  mean  by 
"resourcing?" 

That’s  how  we  define  the 
process  of  taking  the  prod¬ 
ucts  and  services  provided 
by  an  incumbent  provider 
(in  this  case,  EDS)  and 
switching  them  to  new  or 
multiple  providers. 


How  did  you  develop 
your  winnowing  process? 

The  first  thing  I  did  was 
identify  nine  of  the  larger 
players  in  the  [outsourc¬ 
ing]  industry.  We 
brought  each  in  for  half 
a  day,  sat  down  with 
[GM  Vice  President  and 
CIO]  Ralph  Szygenda  and 
talked  about  the  types  of 
services  we  were  thinking 
about  bidding  out.  Then 
we  asked  key  questions 
such  as,  “Why  do  you  feel 
this  is  in  alignment  with 
what  your  company  does, 
and  are  there  any  observa¬ 


Dan.  Deasy,  OQ  Genera!  Motors 

Loco votive  Group  (GMLOl  a 
S2  bill, on  General  Motors  Corp 
business  unit,  LaGrange,  III. 

►  BIT  B,USineSS  Manuf»“nn9 

Hlred  In  June  1997;  previ¬ 
ously  was  director  of  IS  at 

'nve.echCcrp.,ahigh.techfirm 

«roit,  and  spent  13  years  In 
management  in  the  space 
shuttle  division  of  Rockwell 
International  Corp. 

►  Day  to  Day  Oversees  unit's 

IS  or9anization  and  is  a 
key  member  of  senior 
management  team 

►  Challenges  Managing  the  new 
multivendor  relationship  and 

helping  other  GM  bus.ness  un.K 

'earn  from  GMLG's  experience 


the  requirements  of  our 
business.  So  we  had  to 
do  a  lot  of  homework  to 
prepare  them  for  this  bid 
opportunity.  I  came  up 
with  what  we  call  “level 
the  playing  field”  educa¬ 
tion.  I  asked  the  senior 
management  of  GMLG  to 
give  me  a  team  of  some  of 
their  best  business  people 
for  five  weeks  and  allow 
me  to  bring  in  five  vendors 
[culled  from  the  original 
nine],  one  at  a  time,  for  a 
full  week  of  education 
about  GMLG.  It  meant  a 
significant  investment  on 
GMLG’s  part. 

At  the  halfway  point  of 
the  job,  when  they 
had  the  RFPs  in 
their  hands,  we 
invited  each  vendor 
in  for  what  we  called 
a  midterm  review. 
The  purpose  was 
twofold:  First,  it  gave 
them  an  opportunity 
to  seek  clarification 
on  any  aspect  of  the 
RFP  that  they  didn’t 
understand.  Second,  it 
provided  them  the 
opportunity  to  share 
the  ideas  they  were 
formulating  about 
their  overall  solutions. 
And  then  we  gave  them 
feedback  about  where 
they  were  taking  their 
solutions. 


tions  that  you  can  share 
with  us  that  might  help  us 
as  we  bid  this?” 

And  their  answers  were 
insightful? 

We  discovered  that  the  ven¬ 
dors  knew  very  little  about 


How  will  the  deal 
change  GMLG? 

We  are  suddenly  creating  a 
multivendor  environment 
where  vendors  are  going  to 
have  to  learn  to  work 
together.  That’s  going  to  be 
one  of  the  major  challenges 
facing  us  going  forward. 

-Tom  Field 
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Introducing  the  Xerox  DocuColor  Office  6. 


Stop  sending  out  for  color  documents. 

Print  or  copy  them  fast  and  conveniently 
on  your  own  Xerox  DocuColor  Office  6.  At 
6  color  pages  a  minute,  it  not  only  keeps  up 
with  the  pace  of  your  business,  but  the  pace 
those  last-minute  changes  you’re  always 
making.  Here’s  more  good  news.  It  prints  or 
copies  in  black  and  white  too.  At  24  pages  a 


minute.  Talk  about  productivity,  the  agile 
DocuColor  Office  6  even  comes  with 
paper-handling  options  such  as  collating 
and  sorting.  Best  of  all,  starting  at  under 
$20,000,  it  puts  color  right  in  your  workgroup. 
To  learn  more  about  how  convenient  color  can 
be  in  your  office,  visit  www.xerox.com  or 
just  give  us  a  call  at  1-800 -AS R-XEROX,  ext.  106. 
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Having  the  world’s  most  popular 

destination  site  is  a  big  responsibility.  After  all, 
with  95  million  page  views  a  day,  the  Yahoo!® 
servers  can’t  afford  to  crash.  Fortunately,  Yahoo! 
uses  Kingston®  server  memory.  Why  Kingston? 
Because  we  impose  strict  design  controls  to 
ensure  compatibility,  and  build  our  memory 
with  only  superior  components  from  the  major 
DRAM  manufacturers.  And  if  you  think  the 
Yahoo!  servers  are  tough  on  memory,  you  should 
see  what  goes  on  at  the  Kingston  testing  lab. 
Our  proprietary  test  hardware  and  software,  used 
in  conjunction  with  advanced  HP®  83000  testers, 
stress  modules  beyond  worst  case  system  environ¬ 
ments.  Of  course,  all  of  these  safety  measures 
add  up  to  one  thing:  unmatched  reliability. 
To  find  out  how  Yahoo!  maximizes  their  server 
performance  visit  www.kingston.com/yahoo  or 
call  Kingston  at  (800)  259-9405.  Do  You  Yahoo!?’" 
Go  to  www.yahoo.com. 
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